-
openssl (1.1.1b-1ubuntu2.4) disco; urgency=medium
* Import libraries/restart-without-asking as used in postinst, to
prevent failure to configure the package without debconf database.
LP: #1832919
-- Dimitri John Ledkov <email address hidden> Thu, 20 Jun 2019 18:31:25 +0100
-
openssl (1.1.1b-1ubuntu2.3) disco; urgency=medium
* Bump major version of OpenSSL in postinst to trigger services restart
upon upgrade. Many services listed there must be restarted when
upgrading 1.1.0 to 1.1.1. LP: #1832522
* Fix path to Xorg for reboot notifications on desktop. LP: #1832421
-- Dimitri John Ledkov <email address hidden> Fri, 14 Jun 2019 13:02:34 +0100
-
openssl (1.1.1b-1ubuntu2.2) disco; urgency=medium
* Cherrypick upstream patch to fix ca -spkac output to be text again.
LP: #1828215
* Cherrypick upstream patch to prevent over long nonces in ChaCha20-Poly1305
CVE-2019-1543
-- Dimitri John Ledkov <email address hidden> Tue, 11 Jun 2019 23:35:36 +0100
-
openssl (1.1.1b-1ubuntu2.1) disco; urgency=medium
* SRU the below two regressions fixes from Debian LP: #1825212
- Fix BUF_MEM regression (Closes: #923516)
- Fix error when config can't be opened (Closes: #926315)
-- Dimitri John Ledkov <email address hidden> Wed, 17 Apr 2019 17:50:04 +0100
-
openssl (1.1.1b-1ubuntu2) disco; urgency=medium
* debian/rules: Ship openssl.cnf in libssl1.1-udeb, as required to use
OpenSSL by other udebs, e.g. wget-udeb. LP: #1822898
* Drop debian/patches/UBUNTU-lower-tls-security-level-for-compat.patch
to revert TLS_SECURITY_LEVEL back to 1. LP: #1822984
-- Dimitri John Ledkov <email address hidden> Wed, 03 Apr 2019 11:50:23 +0100
-
openssl (1.1.1b-1ubuntu1) disco; urgency=medium
* Merge from Debian unstable, remaining changes:
- Replace duplicate files in the doc directory with symlinks.
- debian/libssl1.1.postinst:
+ Display a system restart required notification on libssl1.1
upgrade on servers.
+ Use a different priority for libssl1.1/restart-services depending
on whether a desktop, or server dist-upgrade is being performed.
- Revert "Enable system default config to enforce TLS1.2 as a
minimum" & "Increase default security level from 1 to 2".
- Further decrease security level from 1 to 0, for compatibility with
openssl 1.0.2.
- Drop the NEWS entry, not applicable on Ubuntu.
openssl (1.1.1b-1) unstable; urgency=medium
[ Sebastian Andrzej Siewior ]
* Add Breaks on lighttpd (Closes: #913558).
[ Kurt Roeckx ]
* New upstream version
* Update symbol list
-- Dimitri John Ledkov <email address hidden> Wed, 27 Feb 2019 18:13:17 -0500
-
openssl (1.1.1a-1ubuntu2) disco; urgency=medium
* Drop the NEWS entry, not applicable on Ubuntu.
openssl (1.1.1a-1ubuntu1) disco; urgency=medium
* Merge from Debian unstable, remaining changes:
- Replace duplicate files in the doc directory with symlinks.
- debian/libssl1.1.postinst:
+ Display a system restart required notification on libssl1.1
upgrade on servers.
+ Use a different priority for libssl1.1/restart-services depending
on whether a desktop, or server dist-upgrade is being performed.
- Revert "Enable system default config to enforce TLS1.2 as a
minimum" & "Increase default security level from 1 to 2".
- Further decrease security level from 1 to 0, for compatibility with
openssl 1.0.2.
openssl (1.1.1a-1) unstable; urgency=medium
* Add Breaks on python-boto (See: #909545)
* New upstream version
- CVE-2018-0734 (Timing vulnerability in DSA signature generation)
- CVE-2018-0735 (Timing vulnerability in ECDSA signature generation)
- Update symbol file for 1.1.1a
openssl (1.1.1-2) unstable; urgency=medium
[ Sebastian Andrzej Siewior ]
* Add Breaks on isync (See: #906955)
* Fix autopkgtest (Closes: #910459)
[ Kurt Roeckx ]
* Add Breaks on python-imaplib2 (See: #907079)
* Add news entry regarding default TLS version and security level
(Closes: #875423, #907631, #911389, #912067).
-- Dimitri John Ledkov <email address hidden> Wed, 28 Nov 2018 14:24:28 +0000
-
openssl (1.1.1a-1ubuntu1) disco; urgency=medium
* Merge from Debian unstable, remaining changes:
- Replace duplicate files in the doc directory with symlinks.
- debian/libssl1.1.postinst:
+ Display a system restart required notification on libssl1.1
upgrade on servers.
+ Use a different priority for libssl1.1/restart-services depending
on whether a desktop, or server dist-upgrade is being performed.
- Revert "Enable system default config to enforce TLS1.2 as a
minimum" & "Increase default security level from 1 to 2".
- Further decrease security level from 1 to 0, for compatibility with
openssl 1.0.2.
openssl (1.1.1a-1) unstable; urgency=medium
* Add Breaks on python-boto (See: #909545)
* New upstream version
- CVE-2018-0734 (Timing vulnerability in DSA signature generation)
- CVE-2018-0735 (Timing vulnerability in ECDSA signature generation)
- Update symbol file for 1.1.1a
openssl (1.1.1-2) unstable; urgency=medium
[ Sebastian Andrzej Siewior ]
* Add Breaks on isync (See: #906955)
* Fix autopkgtest (Closes: #910459)
[ Kurt Roeckx ]
* Add Breaks on python-imaplib2 (See: #907079)
* Add news entry regarding default TLS version and security level
(Closes: #875423, #907631, #911389, #912067).
-- Dimitri John Ledkov <email address hidden> Wed, 28 Nov 2018 14:06:04 +0000
-
openssl (1.1.1-1ubuntu2) cosmic; urgency=medium
* Fixup typpos in the autopkgtest binary name.
openssl (1.1.1-1ubuntu1) cosmic; urgency=medium
* Merge from Debian unstable, remaining changes:
- Replace duplicate files in the doc directory with symlinks.
- debian/libssl1.1.postinst:
+ Display a system restart required notification on libssl1.1
upgrade on servers.
+ Use a different priority for libssl1.1/restart-services depending
on whether a desktop, or server dist-upgrade is being performed.
- Revert "Enable system default config to enforce TLS1.2 as a
minimum" & "Increase default security level from 1 to 2".
- Further decrease security level from 1 to 0, for compatibility with
openssl 1.0.2.
openssl (1.1.1-1) unstable; urgency=medium
* New upstream version.
- Update symbol file for 1.1.1
- CVE-2018-0732 (actually since pre8).
* Add Breaks on python-httplib2 (Addresses: #907015)
* Add hardening=+all.
* Update to policy 4.2.1
- Less verbose testsuite with terse
- Use RRR=no
openssl (1.1.1~~pre9-1) unstable; urgency=medium
* New upstream version.
- Support the final TLS 1.3 version (RFC 8446)
* Upload to unstable
openssl (1.1.1~~pre8-1) experimental; urgency=medium
* New upstream version.
openssl (1.1.1~~pre7-1) experimental; urgency=medium
* Drop afalgeng on kfreebsd-* which go enabled because they inherit from
the linux target.
* Fix debian-rules-sets-dpkg-architecture-variable.
* Update to policy 4.1.4
- only Suggest: libssl-doc instead Recommends (only documentation and
example code is shipped).
- drop Priority: important.
- use signing-key.asc and a https links for downloads
* Use compat 11.
- this moves the examples to /usr/share/doc/libssl-{doc->dev}/demos but it
seems to make sense.
* Add a 25-test_verify.t for autopkgtest which runs against intalled
openssl binary.
* Fix CVE-2018-0737 (Closes: #895844).
openssl (1.1.1~~pre6-2) experimental; urgency=medium
* Update libssl1.1.symbols
openssl (1.1.1~~pre6-1) experimental; urgency=medium
* New upstream version
* Increase default security level from 1 to 2. This moves from the 80 bit
security level to the 112 bit securit level and will require 2048 bit RSA
and DHE keys.
openssl (1.1.1~~pre4-1) experimental; urgency=medium
* Update to 1.1.1-pre4 (Closes: #892276, #894282).
* Add riscv64 target (Closes: #891797).
openssl (1.1.1~~pre3-1) experimental; urgency=medium
* Update to 1.1.1-pre3
* Don't suggest 1024 bit RSA key to be typical (Closes: #878303).
* Don't insist on TLS1.3 cipher for <TLS1.3 connections (Closes: #891570).
* Enable system default config to enforce TLS1.2 as a minimum.
openssl (1.1.1~~pre2-1) experimental; urgency=medium
* Update to 1.1.1-pre2
openssl (1.1.1~~pre1-1) experimental; urgency=medium
* Abort the build if symbols are discovered which are not part of the
symbols file.
* Add config support for MIPS R6, patch by YunQiang Su (Closes: #882007).
* Enable afalgeng on Linux targets (Closes: #888305)
* Update 1.1.1-pre1.
-- Dimitri John Ledkov <email address hidden> Tue, 25 Sep 2018 15:41:07 +0100
