2012-05-24 09:11:06 |
Thorsten Glaser |
bug |
|
|
added bug |
2012-05-24 09:21:23 |
Thorsten Glaser |
attachment added |
|
fix from upstream as debdiff against oneiric-security package https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1003841/+attachment/3160696/+files/gnutls26_2.10.5-1ubuntu3.2.debdiff |
|
2012-05-24 09:29:58 |
Thorsten Glaser |
attachment added |
|
fix from upstream as debdiff against precise/quantal package https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1003841/+attachment/3160699/+files/gnutls26_2.12.14-5ubuntu4.debdiff |
|
2012-05-24 09:34:24 |
Thorsten Glaser |
bug |
|
|
added subscriber Martin Soentgenrath |
2012-05-24 12:17:43 |
Ubuntu Foundations Team Bug Bot |
tags |
|
patch |
|
2012-05-24 12:17:50 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
2012-05-31 11:55:42 |
Thorsten Glaser |
bug task added |
|
gnutls13 (Ubuntu) |
|
2012-05-31 11:56:31 |
Thorsten Glaser |
attachment added |
|
debdiff for hardy https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1003841/+attachment/3170079/+files/gnutls13_2.0.4-1ubuntu2.8.debdiff |
|
2012-05-31 12:03:08 |
Thorsten Glaser |
bug task added |
|
gnutls26 (Debian) |
|
2012-05-31 12:22:18 |
Thorsten Glaser |
attachment added |
|
debdiff for lucid https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1003841/+attachment/3170108/+files/gnutls26_2.8.5-2ubuntu0.2.debdiff |
|
2012-06-07 22:32:21 |
Launchpad Janitor |
branch linked |
|
lp:debian/gnutls26 |
|
2012-06-08 13:28:47 |
Sebastien Bacher |
gnutls26 (Ubuntu): importance |
Undecided |
High |
|
2012-06-08 13:28:53 |
Sebastien Bacher |
gnutls26 (Debian): status |
New |
Fix Released |
|
2012-06-08 13:29:28 |
Sebastien Bacher |
nominated for series |
|
Ubuntu Precise |
|
2012-06-08 13:29:28 |
Sebastien Bacher |
bug task added |
|
gnutls13 (Ubuntu Precise) |
|
2012-06-08 13:29:28 |
Sebastien Bacher |
bug task added |
|
gnutls26 (Ubuntu Precise) |
|
2012-06-08 13:29:41 |
Sebastien Bacher |
gnutls26 (Ubuntu Precise): importance |
Undecided |
High |
|
2012-06-08 13:30:30 |
Launchpad Janitor |
gnutls26 (Ubuntu): status |
New |
Fix Released |
|
2012-06-08 13:30:44 |
Sebastien Bacher |
gnutls26 (Ubuntu Precise): status |
New |
Fix Committed |
|
2012-06-08 13:30:47 |
Sebastien Bacher |
removed subscriber Ubuntu Sponsors Team |
|
|
|
2012-06-08 13:30:56 |
Sebastien Bacher |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2012-06-08 13:33:37 |
Sebastien Bacher |
description |
Hi,
while trying to debug NSS with LDAP and SSL (not LP#423252 because it failed even for nōn-suid programmes) I found that gnutls-cli (linked with libgnutls26, like the OpenLDAP client libraries) cannot contact our LDAP server securely in precise. More testing resulted in determining this to be a regression between natty and oneiric, still present in precise. I’m in contact with upstream about this already. More information will thus follow. |
Impact:
gnutls-cli (linked with libgnutls26, like the OpenLDAP client libraries) cannot contact our LDAP server securely in precise
Test case:
if you generate two CA
certificates (#1 and #2) with the same DN and hash, then sign the LDAP server’s
certificate (#3) with #2, not #1, GnuTLS 2.x will not validate it.
Regression potential:
the fix is coming from upstream and is available in Debian
---
Hi,
while trying to debug NSS with LDAP and SSL (not LP#423252 because it failed even for nōn-suid programmes) I found that gnutls-cli (linked with libgnutls26, like the OpenLDAP client libraries) cannot contact our LDAP server securely in precise. More testing resulted in determining this to be a regression between natty and oneiric, still present in precise. I’m in contact with upstream about this already. More information will thus follow. |
|
2012-06-08 13:40:52 |
Sebastien Bacher |
nominated for series |
|
Ubuntu Oneiric |
|
2012-06-08 13:40:52 |
Sebastien Bacher |
bug task added |
|
gnutls13 (Ubuntu Oneiric) |
|
2012-06-08 13:40:52 |
Sebastien Bacher |
bug task added |
|
gnutls26 (Ubuntu Oneiric) |
|
2012-06-08 13:41:33 |
Sebastien Bacher |
gnutls26 (Ubuntu Oneiric): importance |
Undecided |
High |
|
2012-06-08 13:41:36 |
Sebastien Bacher |
gnutls26 (Ubuntu Oneiric): status |
New |
Fix Committed |
|
2012-06-08 13:41:45 |
Sebastien Bacher |
nominated for series |
|
Ubuntu Lucid |
|
2012-06-08 13:41:45 |
Sebastien Bacher |
bug task added |
|
gnutls13 (Ubuntu Lucid) |
|
2012-06-08 13:41:45 |
Sebastien Bacher |
bug task added |
|
gnutls26 (Ubuntu Lucid) |
|
2012-06-08 13:41:56 |
Sebastien Bacher |
gnutls26 (Ubuntu Lucid): importance |
Undecided |
High |
|
2012-06-08 13:42:10 |
Sebastien Bacher |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
2012-06-08 13:43:14 |
Sebastien Bacher |
gnutls13 (Ubuntu Lucid): status |
New |
Invalid |
|
2012-06-08 13:43:17 |
Sebastien Bacher |
gnutls13 (Ubuntu Oneiric): status |
New |
Invalid |
|
2012-06-08 13:43:19 |
Sebastien Bacher |
gnutls13 (Ubuntu Precise): status |
New |
Invalid |
|
2012-06-08 13:43:22 |
Sebastien Bacher |
gnutls13 (Ubuntu): status |
New |
Invalid |
|
2012-06-08 13:44:31 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/gnutls26 |
|
2012-06-08 22:19:03 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
2012-06-08 22:19:06 |
Brian Murray |
tags |
patch |
patch verification-needed |
|
2012-06-08 22:58:16 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/precise-proposed/gnutls26 |
|
2012-06-12 15:38:45 |
Thorsten Glaser |
tags |
patch verification-needed |
patch |
|
2012-06-15 10:31:48 |
James Page |
gnutls26 (Ubuntu Precise): milestone |
|
ubuntu-12.04.1 |
|
2012-07-03 20:13:14 |
Steve Langasek |
tags |
patch |
patch verification-done |
|
2012-07-03 20:28:18 |
Launchpad Janitor |
gnutls26 (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
2012-07-09 14:09:08 |
Stéphane Graber |
nominated for series |
|
Ubuntu Hardy |
|
2012-07-09 14:09:08 |
Stéphane Graber |
bug task added |
|
gnutls13 (Ubuntu Hardy) |
|
2012-07-09 14:09:08 |
Stéphane Graber |
bug task added |
|
gnutls26 (Ubuntu Hardy) |
|
2012-07-09 14:10:27 |
Stéphane Graber |
bug task deleted |
gnutls26 (Ubuntu Hardy) |
|
|
2012-07-09 14:44:57 |
Stéphane Graber |
gnutls26 (Ubuntu Lucid): status |
New |
In Progress |
|
2012-07-09 14:45:11 |
Stéphane Graber |
gnutls13 (Ubuntu Hardy): status |
New |
In Progress |
|
2012-07-09 14:45:32 |
Stéphane Graber |
removed subscriber Ubuntu Sponsors Team |
|
|
|
2012-07-12 17:11:07 |
Clint Byrum |
gnutls13 (Ubuntu Hardy): status |
In Progress |
Fix Committed |
|
2012-07-12 17:11:13 |
Clint Byrum |
tags |
patch verification-done |
patch |
|
2012-07-12 17:11:14 |
Clint Byrum |
tags |
patch |
patch verification-needed |
|
2012-07-16 16:22:48 |
Thorsten Glaser |
tags |
patch verification-needed |
patch verification-done |
|
2012-07-17 02:30:08 |
Adam Conrad |
gnutls26 (Ubuntu Lucid): status |
In Progress |
Fix Committed |
|
2012-07-17 02:30:16 |
Adam Conrad |
tags |
patch verification-done |
patch |
|
2012-07-17 02:30:17 |
Adam Conrad |
tags |
patch |
patch verification-needed |
|
2012-07-17 03:02:31 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/lucid-proposed/gnutls26 |
|
2012-07-17 03:02:42 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-branches/ubuntu/oneiric/gnutls26/oneiric-proposed |
|
2012-07-18 16:29:36 |
Clint Byrum |
tags |
patch verification-needed |
patch verification-done verification-done-hardy verification-needed |
|
2012-07-20 13:19:10 |
Launchpad Janitor |
gnutls13 (Ubuntu Hardy): status |
Fix Committed |
Fix Released |
|
2012-07-24 13:18:01 |
Scott Kitterman |
tags |
patch verification-done verification-done-hardy verification-needed |
patch verification-needed |
|
2012-07-25 22:31:41 |
Clint Byrum |
tags |
patch verification-needed |
patch verification-done |
|
2012-07-26 05:45:13 |
Launchpad Janitor |
gnutls26 (Ubuntu Lucid): status |
Fix Committed |
Fix Released |
|
2012-07-26 05:48:10 |
Launchpad Janitor |
gnutls26 (Ubuntu Oneiric): status |
Fix Committed |
Fix Released |
|
2012-07-26 06:16:40 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/lucid-updates/gnutls26 |
|