openssl 1.1.0h-4ubuntu1 source package in Ubuntu

Changelog

openssl (1.1.0h-4ubuntu1) cosmic; urgency=medium

  * Merge from Debian unstable, remaining changes:
    - Replace duplicate files in the doc directory with symlinks.
    - debian/libssl1.1.postinst:
      + Display a system restart required notification on libssl1.1
        upgrade on servers.
      + Use a different priority for libssl1.1/restart-services depending
        on whether a desktop, or server dist-upgrade is being performed.
    - s390x: Add support for CPACF enhancements to openssl, for IBM z14.
    - grab fixes for CVE-2018-0495 and CVE-2018-0732

openssl (1.1.0h-4) unstable; urgency=medium

  * Build the binary in indep mode again, so we can install the documentation
    again.
  * Drop @echo in flavour so it builds again on Alpha
  * Add a 25-test_verify.t for autopkgtest which runs against intalled
    openssl binary.

openssl (1.1.0h-3) unstable; urgency=medium

  * Drop afalgeng on kfreebsd-* which go enabled because they inherit from
    the linux target.
  * Fix regression with session cache use by clients (See: #895035).
  * openssl rehash: exit 0 on warnings, same as c_rehash (See: #895473 and
    #895482).
  * Fix debian-rules-sets-dpkg-architecture-variable.
  * Let VCS-* point to salsa.d.o.
  * Don't build the binary package in binary-indep mode.
  * Update to policy 4.1.4
    - only Suggest: libssl-doc instead Recommends (only documentation and
      example code is shipped).
    - drop Priority: important.
    - use signing-key.asc and a https links for downloads
  * Use compat 11.
    - this moves the examples to /usr/share/doc/libssl-{doc->dev}/demos but it
      seems to make sense.
  * Fix CVE-2018-0737 (Closes: #895844).

openssl (1.1.0h-2) unstable; urgency=high

  * Revert "only quote stuff that actually needs quoting" so c_rehash has the
    quotes again (Closes: #894282).

openssl (1.1.0h-1) unstable; urgency=medium

  * Abort the build if symbols are discovered which are not part of the
    symbols file.
  * Add config support for MIPS R6, patch by YunQiang Su (Closes: #882007).
  * Enable afalgeng on Linux targets (Closes: #888305)
  * Add riscv64 target (Closes: #891797).
  * New upstream release 1.1.0h
    - Drop applied patches:
       aes-asm-aes-armv4-bsaes-armv7-.pl-make-it-work-with-binut.patch
    - Update symbols file.
    - Fix CVE-2017-3738 (rsaz_1024_mul_avx2 overflow bug on x86_64)
    - Fix CVE-2018-0733 (Incorrect CRYPTO_memcmp on HP-UX PA-RISC)
    - Fix CVE-2018-0739 (Constructed ASN.1 types with a recursive definition
          could exceed the stack)
  * Correct lhash typo in header file (Closes: #892276).

 -- Gianfranco Costamagna <email address hidden>  Sun, 26 Aug 2018 19:31:06 +0200