Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1033704

Bug#959469: buster-pu: package openssl/1.1.1g-1

From "Adam D. Barratt" <adam@adam-barratt.org.uk>
Newsgroups linux.debian.bugs.dist, linux.debian.maint.boot, linux.debian.devel.release
Subject Bug#959469: buster-pu: package openssl/1.1.1g-1
Date 2020-11-20 18:30 +0100
Message-ID <Bdiop-1qu-3@gated-at.bofh.it> (permalink)
References (4 earlier) <A281z-6k2-11@gated-at.bofh.it> <A25Gp-537-9@gated-at.bofh.it> <Bbnse-5qg-13@gated-at.bofh.it> <A25Gp-537-9@gated-at.bofh.it> <Bbnse-5qg-13@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 3 groups.

Show all headers | View raw


On Sun, 2020-11-15 at 11:29 +0100, Sebastian Andrzej Siewior wrote:
> control: retitle -1 buster-pu: package openssl/1.1.1h-1
> 
> On 2020-05-02 22:34:40 [+0100], Adam D. Barratt wrote:
> > > > Do we have any feeling for how widespread such certificates
> > > > might be?
> > > > The fact that there have been two different upstream reports
> > > > isn't particularly comforting.
> > > 
> > > This is correct. I don't know if there is tooling that is
> > > generating broken certificates or just some individuals. I
> > > updated my two OpenVPN instances and I saw clients connecting
> > > again.
> > 
> > Thanks for the information.
> 
> look at that. I deployed it locally and forgot all about it. Now I
> was going to open a pu for 1.1.1h and noticed that I didn't finish
> this one.
> 
> I hereby propose an update to 1.1.1h.

Predictably we're again quite close to a point release. :-( (One week
from freeze, specifically.)

Looking at the upstream issues regarding certificate validation changes
between 1.1.1e and f/g, #11456 appears to have been addressed already,
but #11625 is still open and looks stalled. Have you seen any more
reports of that issue?

Regards,

Adam

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2020-11-20 18:30 +0100
  Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2020-11-20 21:10 +0100
    Bug#959469: buster-pu: package openssl/1.1.1g-1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2020-11-24 21:30 +0100
      Bug#959469: buster-pu: package openssl/1.1.1g-1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2020-11-24 22:00 +0100

csiph-web