| 2021-09-14 07:29:49 |
Nikos Mavrogiannopoulos |
bug |
|
|
added bug |
| 2021-09-14 07:30:47 |
Nikos Mavrogiannopoulos |
description |
In Ubuntu we provide a cryptographic core based on a small set of packages that we FIPS certify [0]. Applications and libraries should not bundle their own crypto code but should use the cryptographic core to benefit from the certification, but also importantly to reduce bugs due to small cryptographic libraries that are not monitored for low level crypto CVEs. This bug is to change libkrb5 to use the openssl crypto code instead of bundling its own.
[0]. https://ubuntu.com/security/fips |
In Ubuntu we provide a cryptographic core based on a small set of packages that we FIPS certify [0]. Applications and libraries should not bundle their own crypto code but should use the cryptographic core to benefit from the certification, but also importantly to reduce bugs due to small cryptographic libraries that are not monitored for low level crypto CVEs. This bug is to change libkrb5 to use the openssl crypto code instead of bundling its own on the next ubuntu release.
[0]. https://ubuntu.com/security/fips |
|
| 2021-09-14 11:50:37 |
Andreas Hasenack |
bug |
|
|
added subscriber Andreas Hasenack |
| 2021-09-14 12:05:26 |
Nikos Mavrogiannopoulos |
description |
In Ubuntu we provide a cryptographic core based on a small set of packages that we FIPS certify [0]. Applications and libraries should not bundle their own crypto code but should use the cryptographic core to benefit from the certification, but also importantly to reduce bugs due to small cryptographic libraries that are not monitored for low level crypto CVEs. This bug is to change libkrb5 to use the openssl crypto code instead of bundling its own on the next ubuntu release.
[0]. https://ubuntu.com/security/fips |
In Ubuntu we provide a cryptographic core based on a small set of packages that we FIPS certify [0]. Applications and libraries should not bundle their own crypto code but should use the cryptographic core to benefit from the certification, but also importantly to reduce bugs due to small cryptographic libraries that researchers may not be verifying crypto vulnerabilities at. This bug is to change libkrb5 to use the openssl crypto code instead of bundling its own on the next ubuntu release.
[0]. https://ubuntu.com/security/fips |
|
| 2021-09-14 12:07:00 |
Nikos Mavrogiannopoulos |
description |
In Ubuntu we provide a cryptographic core based on a small set of packages that we FIPS certify [0]. Applications and libraries should not bundle their own crypto code but should use the cryptographic core to benefit from the certification, but also importantly to reduce bugs due to small cryptographic libraries that researchers may not be verifying crypto vulnerabilities at. This bug is to change libkrb5 to use the openssl crypto code instead of bundling its own on the next ubuntu release.
[0]. https://ubuntu.com/security/fips |
In Ubuntu we provide a cryptographic core based on a small set of packages that we FIPS certify [0]. Applications and libraries should not bundle their own crypto code but should use the cryptographic core to benefit from the certification, but also importantly to reduce bugs due to small cryptographic libraries that that are not studied as much as more popular counterparts. This bug is to change libkrb5 to use the openssl crypto code instead of bundling its own on the next ubuntu release.
[0]. https://ubuntu.com/security/fips |
|
| 2021-09-14 12:08:17 |
Dimitri John Ledkov |
tags |
|
rls-ii-incoming rls-jj-incoming |
|
| 2021-09-14 12:19:02 |
Dimitri John Ledkov |
tags |
rls-ii-incoming rls-jj-incoming |
rls-ii-wontfix rls-jj-incoming |
|
| 2021-10-28 15:16:48 |
Brian Murray |
krb5 (Ubuntu): status |
New |
Incomplete |
|
| 2021-11-18 15:26:43 |
Dimitri John Ledkov |
krb5 (Ubuntu): status |
Incomplete |
Confirmed |
|
| 2021-12-02 16:16:18 |
Brian Murray |
nominated for series |
|
Ubuntu Jammy |
|
| 2021-12-02 16:16:18 |
Brian Murray |
bug task added |
|
krb5 (Ubuntu Jammy) |
|
| 2021-12-02 16:16:30 |
Brian Murray |
tags |
rls-ii-wontfix rls-jj-incoming |
rls-ii-wontfix |
|
| 2021-12-02 16:17:23 |
Matthieu Clemenceau |
tags |
rls-ii-wontfix |
fr-1900 rls-ii-wontfix |
|
