[Pkg-openssl-devel] Bug#918727: Bug#918727: openssl.cnf incompatible with libssl1.0.2, libssl1.0.0

[Kurt Roeckx]

On Tue, Jan 08, 2019 at 08:17:42PM +0000, Simon McVittie wrote:
> Package: openssl
> Version: 1.1.1a-1
> Severity: important
> Control: found -1 1.1.1~~pre3-1
> Control: affects -1 steam
> 
> The openssl.cnf in the openssl package since 1.1.1~~pre3-1 is incompatible
> with libssl < 1.1.0 (I think that's the right cutoff point), either from
> a partial upgrade or bundled with third-party software.
> 
> It should probably at least have a Breaks on libssl1.0.2, to protect
> partial upgrades from stretch. Some release notes for users of
> third-party software might also be useful. I realise it probably isn't
> feasible to keep openssl.cnf compatible with all past and future versions.
[...]
> This affects libssl1.0.0 in the Steam Runtime installed by the non-free
> steam package, and possibly other third-party software bundles.
> (<https://github.com/ValveSoftware/steam-for-linux/issues/6014>)

We can add a Breaks, but I'm not sure that's actually going to fix
anything for those non-free 3rd party things.


Kurt