Your message dated Thu, 7 May 2020 19:31:11 +0900
with message-id
<CAEQ9gEnsu-H9=akdqu+oxtxk5fsxy6-n3gohakvnmmhfkix...@mail.gmail.com>
and subject line Re: Bug#825773: libsodium: Old libsodium in your distro
corrupts data when encrypt/decrypt buffers overlap
has caused the Debian Bug report #825773,
regarding libsodium: Old libsodium in your distro corrupts data when
encrypt/decrypt buffers overlap
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
825773: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825773
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libsodium13
Version: 1.0.0-1
Severity: important
File: libsodium
Dear Maintainer,
The version of libsodium you install on Debian is out of date. The current
version supports overlapping encrypt and decrypt buffers (e.g. encrypt and
decrypt in place),
but when this is attempted with the version that is installed in Debian it
corrupts the buffer on decrypt (without noting any error). This has wasted an
incredible amount
of time, and all future users of Debian are likely to encounter this same
issue, because they expect overlapping decrypt/encrypt buffers to work
(per-documentation).
Please package up a newer version of libsodium with the support for overlapping
buffers, else users of libsodium on Debian are going to be scratching their
heads
and wasting time with an advertised feature that works everywhere else, but
corrupts data on debian after compressing and decompressing it.
-- System Information:
Debian Release: 8.4
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.1.5-x86_64-linode61 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libsodium13:amd64 depends on:
ii libc6 2.19-18+deb8u4
ii multiarch-support 2.19-18+deb8u4
libsodium13:amd64 recommends no packages.
libsodium13:amd64 suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
closing due to inactivity..
On Sun, Apr 2, 2017 at 1:41 PM Roger Shimizu <[email protected]> wrote:
> > Package: libsodium13
> > Version: 1.0.0-1
>
> version in jessie-backports is 1.0.11-1~bpo8+1
> may be able to resolve your problem?
> Or you're asking for pu upload of 1.0.11-1?
The reported version was not in active archive anymore.
If you think current version in archive still have the problem, please
kindly reopen the ticket and specify the exact version, or create a
new ticket.
Thank you!
--
Roger Shimizu, GMT +9 Tokyo
PGP/GPG: 4096R/6C6ACD6417B3ACB1
--- End Message ---
