This bug was fixed in the package openssl - 1.1.1f-1ubuntu2.11
---
openssl (1.1.1f-1ubuntu2.11) focal; urgency=medium
* Fixup pointer authentication for armv8 systems that support it when
using the poly1305 MAC, preventing segmentation faults. (LP: #1960863)
-
Performing verification for openssl on Focal.
An affected user performed the verification, due to c7g instance types
being in "Preview" state on Amazon AWS, and not generally accessible.
The user started a c7g instance, and checked they had openssl
1.1.1f-1ubuntu2.10 from -updates.
They
This was a perfectly researched and written up bug and patch and made
SRU review easy. Thank you!
--
You received this bug notification because you are a member of STS
Sponsors, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1960863
Title:
armv8 paca: poly1305 users
Hello Matthew, or anyone else affected,
Accepted openssl into focal-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/openssl/1.1.1f-1ubuntu2.11 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
Seth, ack; thanks!
Matthew, I uploaded the changes to Focal; thanks for the SRU!
--
You received this bug notification because you are a member of STS
Sponsors, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1960863
Title:
armv8 paca: poly1305 users see segfaults when
None of us are ARM architecture experts but the upstream code nearby
doesn't look like it's changed since this patch was introduced:
https://github.com/openssl/openssl/blame/master/crypto/poly1305/asm/poly1305-armv8.pl
The changes look good to me.
It built correctly (ie, build-time tests) on all archs on PPAs w/ -updates and
-proposed.
It passed autopkgtests on focal/arm64 against the PPA build too.
Thus, no test regressions in our arm64 cpus, and the synthetic test
passes on newer arm64 cpu (tested by user).
Hi @ubuntu-security,
I believe we should ask for your ack, as this is openssl.
If that's right, could you please review it and comment?
The changes look ok technically and w.r.t. test results
(details in sru template and comment above.)
Thanks!
--
You received this bug notification because
8 matches
Mail list logo
