Package: rhash Version: 1.3.3-1 Severity: important rhash (and librhash0) recommends libssl1.0.0. It has a list of libcrypto.so.XX names and tries to load a few crypto algos from libcrypto at runtime via dlopen() if it can fine the library. With libssl1.0.0 gone this does not work anymore. The 1.0.2 suffix is not part of the list.
Please adjust the recommands line and make sure the code tries to load the proper library. Currently we have libssl1.0.2 in unstable. We plan to have libssl1.1 soon (once upstream releases it and the release team allows the transition, it is sitting currently in experimental). It is probably best to wait until openssl transition has started. Sebastian