On 2015-06-10 11:34 AM, Jason DeRose wrote:
> I noticed a (seemingly) related build failure over the weekend:
> 
> https://launchpadlibrarian.net/208521008/buildlog_ubuntu-wily-amd64.degu_0.14.0~alpha~bzr339~ubuntu15.10.1_BUILDING.txt.gz
> 
> As this is a failure (seemingly) caused by an independent SSL implementation 
> (openssl), I wonder if the underlying problem might be in ca-certificates 
> rather than gnutls.
> 
> Of course, no matter how broken ca-certificates might/might-not be in Wily, I 
> reckon a SEGFAULT from gnutls could be indicative of some "very bad things", 
> possibly even an exploitable attack vector.
> 

That build failure is unrelated, and is most likely caused by the openssl in
wily no longer supporting SSLv3.

Marc.



-- 
Mailing list: https://launchpad.net/~ubuntu-phone
Post to     : ubuntu-phone@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-phone
More help   : https://help.launchpad.net/ListHelp

Reply via email to