Regression in openssl 1.0.1f for trusty/esm after last update

Bug #1942357 reported by Leonidas S. Barbosa
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openssl (Ubuntu)
Invalid
Undecided
Leonidas S. Barbosa
Trusty
Fix Released
Undecided
Unassigned

Bug Description

A security regression was reported by Johannes Wegener that is causing a regression in the last openssl1.0.1f in trusty/esm.

[How to reproduce]
1. Install Openssl/libssl1.0.0 Version 1.0.1f-1ubuntu2.27+esm3 on
ubuntu 14.04
2. openssl s_client -connect wikipedia.org:443 2>&1 < /dev/null | sed -n '/-----BEGIN/,/-----END/p' > wikipedia.pem
3. openssl x509 -noout -ocsp_uri -in wikipedia.pem

Expected it prints: http://r3.o.lencr.org
Issue: it's not printing anything.

Thanks Johannes for report this issue.

Changed in openssl (Ubuntu):
status: New → In Progress
assignee: nobody → Leonidas S. Barbosa (leosilvab)
Changed in openssl (Ubuntu Trusty):
status: New → Confirmed
Revision history for this message
Leonidas S. Barbosa (leosilvab) wrote :
Changed in openssl (Ubuntu Trusty):
status: Confirmed → Fix Released
Changed in openssl (Ubuntu):
status: In Progress → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.