This bug was fixed in the package openssl - 3.0.3-0ubuntu1
---
openssl (3.0.3-0ubuntu1) kinetic; urgency=medium
* New upstream release (LP: #1968997):
- d/p/CVE-2022-*: dropped, present upstream
- d/p/c_rehash-compat.patch: refreshed
-- Simon Chopin Thu, 05 May 2022
This bug was fixed in the package openssl - 3.0.2-0ubuntu1.2
---
openssl (3.0.2-0ubuntu1.2) jammy; urgency=medium
* d/p/lp1968997/*: cherry-pick a patchset to fix issues with the Turkish
locale (LP: #1968997)
-- Simon Chopin Thu, 05 May 2022 10:04:52
+0200
** Changed in:
** Tags added: verification-done
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1968997
Title:
openssl has catastrophic issues when locale set to TR_UTF8
To manage notifications about this bug go
** Tags removed: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1968997
Title:
openssl has catastrophic issues when locale set to TR_UTF8
To manage notifications about this bug
I've been using 3.0.2-0ubuntu1.2 on jammy for a couple of days without
any noticeable regression, and have confirmed that the bug has been
fixed using the curl method outlined above.
Marking as verified on jammy.
** Tags removed: verification-needed-jammy
** Tags added: verification-done-jammy
Good news, proposed patch fixed the issue.
Fresh Kubuntu (Turkish) on a VM with proposed patches enabled. Original
symptom isn't there
# sudo ua status
[sudo] ilgaz için parola:
SERVICE AVAILABLE DESCRIPTION
cc-eal no Common Criteria EAL2 Provisioning Packages
cis
Hello Ilgaz, or anyone else affected,
Accepted openssl into jammy-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.2 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
** Changed in: openssl (Ubuntu Kinetic)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1968997
Title:
openssl has catastrophic issues when locale set to
** Changed in: openssl (Ubuntu Jammy)
Assignee: (unassigned) => Graham Inggs (ginggs)
** Changed in: openssl (Ubuntu Kinetic)
Assignee: Simon Chopin (schopin) => Graham Inggs (ginggs)
** Changed in: openssl (Ubuntu Jammy)
Status: Confirmed => In Progress
** Changed in: openssl
** Changed in: openssl (Ubuntu Jammy)
Importance: Undecided => Critical
** Changed in: openssl (Ubuntu Jammy)
Status: In Progress => Confirmed
** Changed in: openssl (Ubuntu Kinetic)
Status: In Progress => Confirmed
--
You received this bug notification because you are a
** Patch added: "openssl.debdiff"
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1968997/+attachment/5586942/+files/openssl.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1968997
Here's the debdiff for kinetic, which is the whole 3.0.3 upstream
release.
You'll find a build for it in my PPA:
https://launchpad.net/~schopin/+archive/ubuntu/test-
ppa/+sourcepub/13495883/+listing-archive-extra
(just pop the extra changelog entry)
--
You received this bug notification
Attached is the patch for the Jammy SRU
** Patch added: "openssl_jammy.debdiff"
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1968997/+attachment/5586889/+files/openssl_jammy.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
** Changed in: openssl (Ubuntu Jammy)
Status: New => Confirmed
** Changed in: openssl (Ubuntu Jammy)
Status: Confirmed => In Progress
** Description changed:
- I noticed this when I checked "ua status". It alerted me that I should
- check my openssl configuration.
+ [Impact]
+
+
** Also affects: openssl (Ubuntu Kinetic)
Importance: Critical
Assignee: Simon Chopin (schopin)
Status: In Progress
** Also affects: openssl (Ubuntu Jammy)
Importance: Undecided
Status: New
** Tags removed: rls-jj-incoming
--
You received this bug notification because
Moving back to In Progress and assigning to me, as there is now an
upstream fix that has been merged in their 3.0 branch:
https://github.com/openssl/openssl/pull/18103 (patches applied manually,
hence the wrong status of the PR)
(note that the patch caused a regression on their master branch, but
Note that because these locale objects are declared 'static', they don't
go out of scope until the library is unloaded. So the only way this
results in a memory leak is if a process is opening libssl via dlopen,
then unloading it, then loading it again.
--
You received this bug notification
Upstream did a review of these changes and I think they have some valid points:
https://github.com/openssl/openssl/pull/18115#issuecomment-1099784064
I'm also worried that the newlocale() calls have no corresponding
freelocale() counterparts. I think this needs a bit more tinkering
before we
I've uploaded a fix to the jammy unapproved queue, but it's a rather
large patch and I think it should be reviewed by another member of the
release team.
** Changed in: openssl (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of
** Changed in: openssl (Ubuntu)
Importance: High => Critical
** Changed in: openssl (Ubuntu)
Status: Confirmed => In Progress
** Changed in: openssl (Ubuntu)
Assignee: (unassigned) => Steve Langasek (vorlon)
--
You received this bug notification because you are a member of
** Tags added: fr-2255
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1968997
Title:
openssl has catastrophic issues when locale set to TR_UTF8
To manage notifications about this bug go to:
** Tags added: rls-jj-incoming
** Changed in: openssl (Ubuntu)
Importance: Undecided => High
** Changed in: openssl (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
22 matches
Mail list logo
