[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
This bug was fixed in the package libvirt - 1.3.1-1ubuntu10.30 --- libvirt (1.3.1-1ubuntu10.30) xenial; urgency=medium * d/p/lp-1844455-node_device_conf-Don-t-leak-physical_function.patch: fix memory-leak from PCI-related structure. (LP: #1844455) * d/p/lp-1864918-Fix-TLS-test-suites-with-gnutls-3.6.0.patch: fix failing TLS tests due to recent-introduced SHA1 restriction in gnutls. (LP: #1864918) -- gpicc...@canonical.com (Guilherme G. Piccoli) Wed, 26 Feb 2020 13:23:18 -0300 ** Changed in: libvirt (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
The verification of the Stable Release Update for libvirt has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions. ** Changed in: libvirt (Ubuntu Xenial) Status: Incomplete => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
So it seems libvirt FTBFS on i386 in xenial-proposed right now: https://launchpad.net/ubuntu/+source/libvirt/1.3.1-1ubuntu10.30 Does this mean the package is still broken? Should we mark this as verification-failed? ** Changed in: libvirt (Ubuntu Xenial) Status: Fix Committed => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
I just verified this LP by building on PPA the current libvirt on xenial-proposed (1.3.1-1ubuntu10.30) - it succeeded. Also, checked the code and the patch is there, hence I'll mark this LP as verified. Thanks, Guilherme ** Tags removed: verification-needed verification-needed-xenial ** Tags added: verification-done verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
Thanks Robie, I set Critical because it prevented PPA/LP build for the package, hence it blocked any other fix =) But feel free to mark it as low. Also, would be nice to understand why a security SRU to gnutls was released without running reverse tests, risking to break any number of packages! Cheers, Guilherme -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
Hello Guilherme, or anyone else affected, Accepted libvirt into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/libvirt/1.3.1-1ubuntu10.30 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: libvirt (Ubuntu Xenial) Status: In Progress => Fix Committed ** Tags added: verification-needed verification-needed-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
As you say, this only affects tests, so presumably Importance -> Critical was a mistake? ** Changed in: libvirt (Ubuntu Xenial) Importance: Critical => Low -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
The fix for this LP will be uploaded/handled in LP #1844455. Thanks, Guilherme -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
** Attachment added: "PPA buildlog of a successful scenario (WITH the proposed
patch)"
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+attachment/5331402/+files/buildlog_TLS_test_SUCCESS.txt.gz
** Description changed:
- This is a placeholder for now, while I work the patch SRU to make test pass
on xenial build.
- Will enhance the description soon.
+ [Impact]
+
+ * Since version 3.4.10-4ubuntu1.6 on Xenial, gnutls considers SHA1
+ certificates to be insecure - this affects libvirt tests
+ "virnettlscontexttest" and "virnettlssessiontest", preventing the
+ correct build of the package.
+
+ * The fix is available upstream since libvirt v3.7.0, as commit
+ c61bbc ("Fix TLS test suites with gnutls 3.6.0") [
+ libvirt.org/git/?p=libvirt.git;a=commit;h=c61b ], which uses SHA256
+ for the certificates generated on tests.
+
+ [Test Case]
+
+ * Basic testing consists is spin-up a PPA builder and try to build
+ libvirt - it'll fail in amd64 and i386 architectures. With the proposed
+ patch, it succeeds. Both failure and success buildlogs are attached in
+ the LP.
+
+ [Regression Potential]
+
+ * The regression potential in this case is minimal, since it only
+ affects testing. Also, this patch is present in all subsequent releases
+ and is hereby introduced only in Xenial after the gnutls change (from
+ version 3.6) was backported to Xenial as well.
** Changed in: libvirt (Ubuntu Xenial)
Status: Confirmed => In Progress
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1864918
Title:
libvirt for Xenial failing to build due to gnutls SHA1 restriction
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1864918] Re: libvirt for Xenial failing to build due to gnutls SHA1 restriction
** Changed in: libvirt (Ubuntu Xenial) Importance: Medium => Critical ** Attachment added: "PPA buildlog of a failing scenario (without the proposed patch)" https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+attachment/5331401/+files/buildlog_TLS_test_failing.txt.gz -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864918 Title: libvirt for Xenial failing to build due to gnutls SHA1 restriction To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1864918/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
