[Pkg-openssl-devel] Bug#793565: Bug#793565: libssl1.0.0: HMAC broken after upgrade to 1.0.2d-1

[Kurt Roeckx]

On Sat, Jul 25, 2015 at 08:45:39AM +0200, Marc Lehmann wrote:
> Package: libssl1.0.0
> Version: 1.0.2d-1
> Severity: normal
> 
> Dear Maintainer,
> 
> upgrading libssl1.0.0 from 1.0.1k-3+deb8u1 to 1.0.2d-1 breaks HMAC
> authentication in a gvpe compiled with 1.0.1k-3.

I will need more information other than that it doesn't work.  I
don't have any idea who gvpe works.

> Since the ABI was apparently broken before (#788511), chances are high
> that the fix in 1.0.2d-1 isn't effective and 1.0.2d-1 is still ABI
> incompatible to the version in jessie.

This is very unlikely.  But if it's really the case rebuilding
against that version should fix the issue.


Kurt