ubuntu-phone team mailing list archive

[Marc Deslauriers <marc.deslauriers@xxxxxxxxxxxxx>]

On 2015-06-10 11:34 AM, Jason DeRose wrote:
> I noticed a (seemingly) related build failure over the weekend:
> 
> https://launchpadlibrarian.net/208521008/buildlog_ubuntu-wily-amd64.degu_0.14.0~alpha~bzr339~ubuntu15.10.1_BUILDING.txt.gz
> 
> As this is a failure (seemingly) caused by an independent SSL implementation (openssl), I wonder if the underlying problem might be in ca-certificates rather than gnutls.
> 
> Of course, no matter how broken ca-certificates might/might-not be in Wily, I reckon a SEGFAULT from gnutls could be indicative of some "very bad things", possibly even an exploitable attack vector.
> 

That build failure is unrelated, and is most likely caused by the openssl in
wily no longer supporting SSLv3.

Marc.