ubuntu-phone team mailing list archive

[Jason DeRose <jason@xxxxxxxxxxxx>]

Yeah, oops... didn't correctly recall the details :)

----- Original Message -----
From: "Marc Deslauriers" <marc.deslauriers@xxxxxxxxxxxxx>
To: "Jason DeRose" <jason@xxxxxxxxxxxx>, "Rodney Dawes" <rodney.dawes@xxxxxxxxxxxxx>
Cc: "Ubuntu Phone" <ubuntu-phone@xxxxxxxxxxxxxxxxxxx>
Sent: Wednesday, June 10, 2015 9:34:12 AM
Subject: Re: [Ubuntu-phone] SEGFAULT in silos - Was Re: Landing team 09.06.15

On 2015-06-10 11:34 AM, Jason DeRose wrote:
> I noticed a (seemingly) related build failure over the weekend:
> 
> https://launchpadlibrarian.net/208521008/buildlog_ubuntu-wily-amd64.degu_0.14.0~alpha~bzr339~ubuntu15.10.1_BUILDING.txt.gz
> 
> As this is a failure (seemingly) caused by an independent SSL implementation (openssl), I wonder if the underlying problem might be in ca-certificates rather than gnutls.
> 
> Of course, no matter how broken ca-certificates might/might-not be in Wily, I reckon a SEGFAULT from gnutls could be indicative of some "very bad things", possibly even an exploitable attack vector.
> 

That build failure is unrelated, and is most likely caused by the openssl in
wily no longer supporting SSLv3.

Marc.