Test failed on xenial 16.04: https://paste.ubuntu.com/p/qbmkGS5RSB/
Already shared latest info and straces with Vineetha.
** Tags removed: verification-needed-disco verification-needed-xenial
** Tags added: verification-failed-xenial
** Tags added: verification-needed-disco
--
You received
Hello Vineetha, or anyone else affected,
Accepted nss into xenial-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.7 in a
few hours, and then in the -proposed repository.
Please help us by testing this new package. See
Hello Vineetha, or anyone else affected,
Accepted nss into disco-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/nss/2:3.42-1ubuntu2.2
in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
This bug was fixed in the package nss - 2:3.45-1ubuntu2
---
nss (2:3.45-1ubuntu2) eoan; urgency=medium
* Disable reading fips_enabled flag in FIPS mode. libnss is
not a FIPS certified library. (LP: #1837734)
-- Vineetha Kamath Tue, 23 Jul 2019
20:58:12 +
** Changed in:
ACK on the debdiffs. Uploaded to eoan and to previous releases for
processing by the SRU team, with slight versioning adjustment and the
bug tag added to the changelog.
Thanks!
** Changed in: nss (Ubuntu Xenial)
Status: Confirmed => In Progress
** Changed in: nss (Ubuntu Bionic)
** Also affects: nss (Ubuntu Eoan)
Importance: High
Assignee: Vineetha Kamath (vineetha)
Status: New
** Also affects: nss (Ubuntu Xenial)
Importance: Undecided
Status: New
** Also affects: nss (Ubuntu Disco)
Importance: Undecided
Status: New
** Also affects:
** Description changed:
[IMPACT]
nss is not a FIPS certified library. On a machine running FIPS enabled
kernel, the library by default goes into FIPS mode if
/proc/sys/crypto/fips_enabled=1. This is an untested configuration and since
libnss3 is not a certified library we propose disabling
debdiff.disco
** Attachment added: "debdiff.disco"
https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1837734/+attachment/5279026/+files/debdiff.disco
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
debdiff.xenial
** Attachment added: "debdiff.xenial"
https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1837734/+attachment/5279028/+files/debdiff.xenial
** Description changed:
[IMPACT]
nss is not a FIPS certified library. On a machine running FIPS enabled
kernel, the library by
debdiff.eoan
** Attachment added: "debdiff.eoan"
https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1837734/+attachment/5279025/+files/debdiff.eoan
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Attachment added: "debdiff.bionic"
https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1837734/+attachment/5279027/+files/debdiff.bionic
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1837734
The build log and test runs for eoan build is on my test ppa
https://launchpad.net/~vineetha/+archive/ubuntu/test-ppa/+build/17312645
The build log and test runs for disco build is on my test ppa
https://launchpad.net/~vineetha/+archive/ubuntu/test-ppa/+build/17315636
The build log and test runs
** Description changed:
[IMPACT]
- nss is not a FIPS certified library. On a machine running FIPS enabled
kernel, the library by default goes into FIPS mode if
/proc/sys/crypto/fips_enabled=1. This is an untested configuration and since
libnss3 is not a certified library we propose disabling
13 matches
Mail list logo
