[ubuntu/kinetic-proposed] openssl 3.0.3-5ubuntu1 (Accepted)

Simon Chopin schopin at ubuntu.com
Tue May 31 08:01:19 UTC 2022


openssl (3.0.3-5ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1974035):
    Remaining change:
    - Replace duplicate files in the doc directory with symlinks.
    - d/libssl3.postinst: Revert Debian deletion
      + Skip services restart & reboot notification if needrestart is in-use.
      + Bump version check to to 1.1.1.
      + Use a different priority for libssl1.1/restart-services depending
        on whether a desktop, or server dist-upgrade is being performed.
      + Import libraries/restart-without-asking template as used by above.
    - Add support for building with noudeb build profile.
    - Revert "Enable system default config to enforce TLS1.2 as a
      minimum" & "Increase default security level from 1 to 2".
    - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security
      level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions
      below 1.2 and update documentation. Previous default of 1, can be set
      by calling SSL_CTX_set_security_level(), SSL_set_security_level() or
      using ':@SECLEVEL=1' CipherString value in openssl.cfg.
    - Use perl:native in the autopkgtest for installability on i386.
    - d/p/skip_tls1.1_seclevel3_tests.patch: new Ubuntu-specific patch for the
      testsuite
  * Add some more string comparison fixes (LP: #1974037)
  * d/p/Set-systemwide-default-settings-for-libssl-users: partially apply it on
    Ubuntu to make it easier for user to change security level (LP: #1972056)
  * d/p/lp1947588.patch: Cherry-picked as our patches make it very easy to
    trigger the underlying bug (LP: #1947588)

Date: Tue, 31 May 2022 09:49:54 +0200
Changed-By: Simon Chopin <schopin at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openssl/3.0.3-5ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 31 May 2022 09:49:54 +0200
Source: openssl
Built-For-Profiles: noudeb
Architecture: source
Version: 3.0.3-5ubuntu1
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Simon Chopin <schopin at ubuntu.com>
Launchpad-Bugs-Fixed: 1947588 1972056 1974035 1974037
Changes:
 openssl (3.0.3-5ubuntu1) kinetic; urgency=medium
 .
   * Merge with Debian unstable (LP: #1974035):
     Remaining change:
     - Replace duplicate files in the doc directory with symlinks.
     - d/libssl3.postinst: Revert Debian deletion
       + Skip services restart & reboot notification if needrestart is in-use.
       + Bump version check to to 1.1.1.
       + Use a different priority for libssl1.1/restart-services depending
         on whether a desktop, or server dist-upgrade is being performed.
       + Import libraries/restart-without-asking template as used by above.
     - Add support for building with noudeb build profile.
     - Revert "Enable system default config to enforce TLS1.2 as a
       minimum" & "Increase default security level from 1 to 2".
     - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security
       level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions
       below 1.2 and update documentation. Previous default of 1, can be set
       by calling SSL_CTX_set_security_level(), SSL_set_security_level() or
       using ':@SECLEVEL=1' CipherString value in openssl.cfg.
     - Use perl:native in the autopkgtest for installability on i386.
     - d/p/skip_tls1.1_seclevel3_tests.patch: new Ubuntu-specific patch for the
       testsuite
   * Add some more string comparison fixes (LP: #1974037)
   * d/p/Set-systemwide-default-settings-for-libssl-users: partially apply it on
     Ubuntu to make it easier for user to change security level (LP: #1972056)
   * d/p/lp1947588.patch: Cherry-picked as our patches make it very easy to
     trigger the underlying bug (LP: #1947588)
Checksums-Sha1:
 67c6be3552c0e8904b20c9b2ff2e830f2100d118 2300 openssl_3.0.3-5ubuntu1.dsc
 9dc7b6321a20d769bf712095fd2c6439238dbbfe 114312 openssl_3.0.3-5ubuntu1.debian.tar.xz
 9b314cf65ed5739755e82757cb19f3b38c4a51ed 7194 openssl_3.0.3-5ubuntu1_source.buildinfo
Checksums-Sha256:
 c6168b6254faa93f65c2c425388ac5b51200e94f6c27ce5eb6d67f21b6d38b09 2300 openssl_3.0.3-5ubuntu1.dsc
 8365a204458a5b63eec99a86ba28ffe4cabf4df229a200695c339a12c4ea7581 114312 openssl_3.0.3-5ubuntu1.debian.tar.xz
 ad2aea563ca3b40a8065239d3fe8d75647f542b7eca0454daf3e725d5b788c5e 7194 openssl_3.0.3-5ubuntu1_source.buildinfo
Files:
 401abf9603d76ce65e226f72380368d6 2300 utils optional openssl_3.0.3-5ubuntu1.dsc
 d7e1414f8b8886864d283a266e5f7887 114312 utils optional openssl_3.0.3-5ubuntu1.debian.tar.xz
 2174af88b8d9dfd1edc9d0a2ff603eab 7194 utils optional openssl_3.0.3-5ubuntu1_source.buildinfo
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at alioth-lists.debian.net>
Vcs-Git: https://git.launchpad.net/~schopin/ubuntu/+source/openssl
Vcs-Git-Commit: 62a67b52c1014f0ec74c642ef3ca16394241f5fe
Vcs-Git-Ref: refs/heads/merge-lp1974035-kinetic


More information about the kinetic-changes mailing list