On Tue, Jan 08, 2019 at 08:17:42PM +0000, Simon McVittie wrote: > Package: openssl > Version: 1.1.1a-1 > Severity: important > Control: found -1 1.1.1~~pre3-1 > Control: affects -1 steam > > The openssl.cnf in the openssl package since 1.1.1~~pre3-1 is incompatible > with libssl < 1.1.0 (I think that's the right cutoff point), either from > a partial upgrade or bundled with third-party software. > > It should probably at least have a Breaks on libssl1.0.2, to protect > partial upgrades from stretch. Some release notes for users of > third-party software might also be useful. I realise it probably isn't > feasible to keep openssl.cnf compatible with all past and future versions. [...] > This affects libssl1.0.0 in the Steam Runtime installed by the non-free > steam package, and possibly other third-party software bundles. > (<https://github.com/ValveSoftware/steam-for-linux/issues/6014>)
We can add a Breaks, but I'm not sure that's actually going to fix anything for those non-free 3rd party things. Kurt