Hello Tixy, Thank you for your help! Yes, I always use 'apt update' prior to upgrades! Thank you for asking.
Oddly enough, when I checked several hours later the changelog was finally there, dated June 24th. Perhaps this thread had something to do with it? The update went smoothly. > It just means that version isn't available in the repositories. If you > get a list by pointing a web broswer at last directory in that URL > (https://metadata.ftp-master.debian.org/changelogs/main/o/openssl/) > you see 'u2' is the latest version. > > If you go to the package tracker at https://tracker.debian.org > and search for 'openssl' you get to a page that shows under 'news' that > the 'u3' version is 'embargoed'. Which means it's been produced but not > publicly available, this is done when packages have security fixes for > for vulnerabilities that haven't been publicly detailed yet. > There's been at lot of news in recent days about bugs in openssl. > > This doesn't answer why your machine is trying to download this 'u3' > version, perhaps it appeared transiently for a time your machine was > trying to update. > > Have you tried running 'apt update' to refresh the package list on you > computer. > > -- > Tixy >