On Sun, 2021-01-24 at 12:25 +0100, Sebastian Andrzej Siewior wrote: > On 2021-01-22 16:38:28 [+0000], Adam D. Barratt wrote: > > Both would be good, please. > > Here is the complete diff against the last openssl release in Buster.
Thanks. I realise that this has been dragging on for quite some time now, and apologies again for my part in that. My (possibly overly paranoid) concern right now is that if we aim for including 1.1.1i in 10.8, there's less than a week of the upload window remaining for any testing to happen and issues to be flagged up. While I can't see any reason that packages in general should end up with dependencies on 1.1.1i specifically, the debian-installer rebuild for the point release will end up pulling in whichever version of OpenSSL is in p-u at the time. That implies that we can't simply not include the update if it's in p-u and blocking issues show up. KiBi - I'm assuming that it would be much easier for you to check d-i against the new OpenSSL version if it were already in p-u? Regards, Adam