[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-06-14 Thread Simon Chopin
On a fresh Jammy LXC container: root@rational-polliwog:~# dpkg -l libssl-dev | tail -n 1 ii libssl-dev:amd64 3.0.2-0ubuntu1.4 amd64Secure Sockets Layer toolkit - development files root@rational-polliwog:~# cat < openssl_test.c #include int main() { EVP_PKEY_Q_keygen(NULL, NULL,

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-06-08 Thread Ɓukasz Zemczak
Hello Simon, or anyone else affected, Accepted openssl into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.3 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-06-04 Thread Launchpad Bug Tracker
This bug was fixed in the package openssl - 3.0.3-5ubuntu2 --- openssl (3.0.3-5ubuntu2) kinetic; urgency=medium * d/p/Set-systemwide-default-settings-for-libssl-users: don't comment out the CipherString string to avoid an empty section. -- Simon Chopin Tue, 31 May 2022

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-05-24 Thread Ubuntu Foundations Team Bug Bot
** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/1974037 Title: openssl: EVP_EC_gen() segfault without init Status in openssl package in Ubuntu: In

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-05-24 Thread Simon Chopin
** Description changed: - Imported from Debian bug http://bugs.debian.org/1010958: + [Impact] + + The fix for + https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1968997 has + broken some code paths as the new string comparison functions now need + initialization, triggering segafults. + +

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-05-24 Thread Simon Chopin
Attached is a debdiff for the Jammy changes. I'm still working on Kinetic as this will be folded into the merge, but I still need to do some more work as some new patches have surfaced upstream since then, as well as a new Debian revision. I feel the Jammy SRU should still move forward. Note that

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-05-24 Thread Simon Chopin
** Changed in: openssl (Ubuntu Kinetic) Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/1974037 Title: openssl: EVP_EC_gen()

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-05-23 Thread Simon Chopin
** Merge proposal linked: https://code.launchpad.net/~schopin/ubuntu/+source/openssl/+git/openssl/+merge/423153 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/1974037

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-05-18 Thread Bug Watch Updater
** Changed in: openssl (Debian) Status: New => Fix Released ** Changed in: openssl (Debian) Importance: Undecided => Unknown -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu.

[Touch-packages] [Bug 1974037] Re: openssl: EVP_EC_gen() segfault without init

2022-05-18 Thread Simon Chopin
This issue has been introduced in 3.0.3 upstream but we've backported the patch set to Jammy as well. The cherry-picked fix is in Debian in 3.0.3-4. ** Changed in: openssl (Ubuntu) Status: New => Confirmed ** Also affects: openssl (Ubuntu Kinetic) Importance: Undecided Status: