Re: [Touch-packages] [Bug 1994165] Re: CMS_final: do not ignore CMS_dataFinal result

2023-09-16 Thread Gil Weis
Hi It seems that the issue is solved. Thanks On Tue, Sep 12, 2023 at 12:16 PM Adrien Nader <1994...@bugs.launchpad.net> wrote: > I've created a PPA for Jammy that incorporates the fix mentionned. The > details are available at > https://launchpad.net/~adrien-n/+archive/ubuntu/openssl-jammy-sru .

[Touch-packages] [Bug 1994165] Re: CMS_final: do not ignore CMS_dataFinal result

2022-12-02 Thread Gil Weis
Thanks. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/1994165 Title: CMS_final: do not ignore CMS_dataFinal result Status in openssl package in Ubuntu: Incomplete Stat

Re: [Touch-packages] [Bug 1994165] Re: CMS_final: do not ignore CMS_dataFinal result

2022-11-16 Thread Gil Weis
Hi, This is a serious bug. CMS_final() finalises the structure cms. Its purpose is to perform any operations necessary on cms. CMS_final() call to SMIME_crlf_copy() and not checking the return value from SMIME_crlf_copy() so even SMIME_crlf_copy() fail, CMS_final() will return ok but with wrong CMS

[Touch-packages] [Bug 1994165] Re: CMS_final: do not ignore CMS_dataFinal result

2022-11-14 Thread Gil Weis
Hi, This is a serious bug. CMS_final() finalises the structure cms. Its purpose is to perform any operations necessary on cms. CMS_final() call to SMIME_crlf_copy() and not checking the return value from SMIME_crlf_copy() so even SMIME_crlf_copy() fail, CMS_final() will return ok but with wrong

[Touch-packages] [Bug 1994165] Re: CMS_final: do not ignore CMS_dataFinal result

2022-10-26 Thread Gil Weis
3.0.6 include this fix. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/1994165 Title: CMS_final: do not ignore CMS_dataFinal result Status in openssl package in Ubuntu:

[Touch-packages] [Bug 1994165] [NEW] CMS_final: do not ignore CMS_dataFinal result

2022-10-25 Thread Gil Weis
Public bug reported: https://github.com/openssl/openssl/pull/18876 The CMS_dataFinal result is important as signature may fail, however, it is ignored while returning success from CMS_final. Please add this fix to The openssl 3.0.2 "Jammy Jellyfish (supported)" Thanks ** Affects: openssl (Ubu