Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.boot > #63330 > unrolled thread

Bug#959469: buster-pu: package openssl/1.1.1g-1

Started by"Adam D. Barratt" <adam@adam-barratt.org.uk>
First post2020-05-02 21:40 +0200
Last post2021-03-22 20:00 +0100
Articles 5 on this page of 25 — 4 participants

Back to article view | Back to linux.debian.maint.boot

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2020-05-02 21:40 +0200
    Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2020-05-02 22:40 +0200
      Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2020-05-02 23:40 +0200
        Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2020-11-20 18:30 +0100
          Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2020-11-20 21:10 +0100
            Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2020-11-24 21:30 +0100
              Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2020-11-24 22:00 +0100
              Bug#959469: buster-pu: package openssl/1.1.1g-1 Kurt Roeckx <kurt@roeckx.be> - 2021-01-09 00:20 +0100
                Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2021-01-14 18:50 +0100
                  Bug#959469: buster-pu: package openssl/1.1.1g-1 Kurt Roeckx <kurt@roeckx.be> - 2021-01-14 19:10 +0100
                    Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-01-14 21:20 +0100
                      Bug#959469: buster-pu: package openssl/1.1.1g-1 Kurt Roeckx <kurt@roeckx.be> - 2021-01-16 19:20 +0100
                        Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-01-21 21:10 +0100
                          Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2021-01-22 17:50 +0100
                            Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-01-24 12:30 +0100
                            Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-01-24 13:10 +0100
                            Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2021-01-25 19:00 +0100
                              Bug#959469: buster-pu: package openssl/1.1.1g-1 Cyril Brulebois <kibi@debian.org> - 2021-01-25 20:10 +0100
                                Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-01-25 21:10 +0100
                    Bug#959469: buster-pu: package openssl/1.1.1g-1 Kurt Roeckx <kurt@roeckx.be> - 2021-01-28 00:40 +0100
                      Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-01-29 20:40 +0100
                        Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-02-02 00:00 +0100
                          Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-02-10 22:00 +0100
                            Re: Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-03-22 19:50 +0100
                              Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2021-03-22 20:00 +0100

Page 2 of 2 — ← Prev page 1 [2]

#65188

FromSebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date2021-01-29 20:40 +0100
Message-ID<BCHMB-2ln-1@gated-at.bofh.it>
In reply to#65172
On 2021-01-28 00:28:03 [+0100], Kurt Roeckx wrote:
> On Thu, Jan 14, 2021 at 07:03:37PM +0100, Kurt Roeckx wrote:
> > There are a whole bunch of other issues and pull requests related to
> > this. I hope this is the end of the regressions in the X509 code.
> 
> So there is something else now:
> https://github.com/openssl/openssl/issues/13931
> https://github.com/openssl/openssl/pull/13982

So what is the plan here? Upload to unstable and prepare a pu once it
migrate to testing or right away?

> Kurt

Sebastian

[toc] | [prev] | [next] | [standalone]

#65219

FromSebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date2021-02-02 00:00 +0100
Message-ID<BDQkO-4qw-3@gated-at.bofh.it>
In reply to#65188

[Multipart message — attachments visible in raw view] — view raw

On 2021-01-29 20:35:52 [+0100], To Kurt Roeckx wrote:
> On 2021-01-28 00:28:03 [+0100], Kurt Roeckx wrote:
> > On Thu, Jan 14, 2021 at 07:03:37PM +0100, Kurt Roeckx wrote:
> > > There are a whole bunch of other issues and pull requests related to
> > > this. I hope this is the end of the regressions in the X509 code.
> > 
> > So there is something else now:
> > https://github.com/openssl/openssl/issues/13931
> > https://github.com/openssl/openssl/pull/13982
> 
> So what is the plan here? Upload to unstable and prepare a pu once it
> migrate to testing or right away?

fed to unstable, migrated to testing. The small diff towards the
previous is attached. I uploaded the whole thing (source package +
amd64 binary) to
	https://breakpoint.cc/openssl-pu.tar

in case someone wants to test.
I think the ship for this pu is sailing without me but I'm ready for the
next cruise :)
The complete diff vs the last package is comming soon.

> > Kurt

Sebastian

[toc] | [prev] | [next] | [standalone]

#65340

FromSebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date2021-02-10 22:00 +0100
Message-ID<BH4KB-2T8-3@gated-at.bofh.it>
In reply to#65219
On 2021-02-01 23:50:03 [+0100], To Kurt Roeckx wrote:
> in case someone wants to test.
> I think the ship for this pu is sailing without me but I'm ready for the
> next cruise :)

OpenSSL upstream announced [0] 1.1.1j for next Tuesday with a security
fix classified as MODERATE [1].

[0] https://mta.openssl.org/pipermail/openssl-announce/2021-February/000191.html
[1] https://www.openssl.org/policies/secpolicy.html#moderate

Sebastian

[toc] | [prev] | [next] | [standalone]

#65785

FromSebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date2021-03-22 19:50 +0100
Message-ID<BVxMK-6tn-7@gated-at.bofh.it>
In reply to#65340
On 2021-02-24 23:23:07 [+0100], To Kurt Roeckx wrote:
> On 2021-02-10 21:52:46 [+0100], To Kurt Roeckx wrote:
> > OpenSSL upstream announced [0] 1.1.1j for next Tuesday with a security
> > fix classified as MODERATE [1].

So this happened. OpenSSL upstream announced [0] 1.1.1k for next
Thursday (25th).

I will prepare 1.1.1k for unstable, do buster-security based on
1.1.1d-0+deb10u5 and then come back with an updated pu :)

[0] https://mta.openssl.org/pipermail/openssl-announce/2021-March/000196.html
 
Sebastian

[toc] | [prev] | [next] | [standalone]

#65786

FromSebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date2021-03-22 20:00 +0100
Message-ID<BVxWq-6wA-9@gated-at.bofh.it>
In reply to#65785
Resending because I managed to accidently clear TO:

On 2021-03-22 19:48:31 [+0100], Cc 959469@bugs.debian.org wrote:
> On 2021-02-24 23:23:07 [+0100], To Kurt Roeckx wrote:
> > On 2021-02-10 21:52:46 [+0100], To Kurt Roeckx wrote:
> > > OpenSSL upstream announced [0] 1.1.1j for next Tuesday with a security
> > > fix classified as MODERATE [1].
> 
> So this happened. OpenSSL upstream announced [0] 1.1.1k for next
> Thursday (25th).
> 
> I will prepare 1.1.1k for unstable, do buster-security based on
> 1.1.1d-0+deb10u5 and then come back with an updated pu :)
> 
> [0] https://mta.openssl.org/pipermail/openssl-announce/2021-March/000196.html
>  
Sebastian

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | linux.debian.maint.boot

csiph-web