*** This bug is a duplicate of bug 1832356 ***
    https://bugs.launchpad.net/bugs/1832356

*** This bug is a security vulnerability ***

Public security bug reported:

Now that OpenSSL 1.1.1 has been added to Bionic, we would like to update
OpenSSH to a version that can be linked to OpenSSL 1.1.1.

We would like to do this for two reasons:

1- The security team would like for the entirety of packages in main to be 
linked to OpenSSL 1.1.1 for maintenance reasons.
2- The security team would like OpenSSH to be build against OpenSSL 1.1.1 for 
FIPS certification.

Version (1:7.9p1-10) from Disco is compatible with OpenSSL 1.1.1, and
would be the version we would use.

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

** This bug has been marked a duplicate of bug 1832356
   Upgrade OpenSSH to 7.9p1-10 or better in stable series

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1844790

Title:
  Update OpenSSH in bionic to (1:7.9p1-10) for FIPS

Status in openssh package in Ubuntu:
  New

Bug description:
  Now that OpenSSL 1.1.1 has been added to Bionic, we would like to
  update OpenSSH to a version that can be linked to OpenSSL 1.1.1.

  We would like to do this for two reasons:

  1- The security team would like for the entirety of packages in main to be 
linked to OpenSSL 1.1.1 for maintenance reasons.
  2- The security team would like OpenSSH to be build against OpenSSL 1.1.1 for 
FIPS certification.

  Version (1:7.9p1-10) from Disco is compatible with OpenSSL 1.1.1, and
  would be the version we would use.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1844790/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to