This bug was fixed in the package curl - 7.68.0-1ubuntu2.10
---
curl (7.68.0-1ubuntu2.10) focal-security; urgency=medium
* SECURITY UPDATE: OAUTH2 bypass
- debian/patches/CVE-2022-22576.patch: check sasl additional
parameters for conn resuse in lib/strcase.c,
1) downgraded openssl to 1.1.1f-1ubuntu2.9 such that it doesn't have
double free fix that was released in
https://launchpad.net/ubuntu/+source/openssl/1.1.1f-1ubuntu2.10
2) installed old pka module from commit
b0f32fa05298bf9e3997ea43fc1c11b90e0d662f
3) installed focal-updates version of curl
Hi, I can't update curl, what should I do?
This is the error code:
The following packages have unmet dependencies:
libcurl4-openssl-dev : Depends: libcurl4 (= 7.68.0-1ubuntu2.8) but
7.68.0-1ubuntu2.7 is to be installed
E: Unable to correct problems, you have held broken packages.
--
You
Autopkgtests have now all passed.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1940528
Title:
curl 7.68 does not init OpenSSL correctly
To manage notifications about this bug go to:
Hello Dimitri, or anyone else affected,
Accepted curl into focal-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/curl/7.68.0-1ubuntu2.8
in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
Not only patch was missing, it was partially missing. reuploading again.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1940528
Title:
curl 7.68 does not init OpenSSL correctly
To manage
Reuploaded curl into focal proposed, with series fix & on top of
security upload that has happened since.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1940528
Title:
curl 7.68 does not init
** Changed in: curl (Ubuntu Focal)
Assignee: (unassigned) => Dimitri John Ledkov (xnox)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1940528
Title:
curl 7.68 does not init OpenSSL correctly
I don't see the patch in debian/patches/series. Am I missing something?
** Changed in: curl (Ubuntu Focal)
Status: Confirmed => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1940528
Building test package in https://launchpad.net/~ci-train-ppa-
service/+archive/ubuntu/4654
But also uploaded it into focal unapproved, which is currently soft
frozen.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Patch added: "lp1940528-openssl-use-OPENSSL_init_ssl-with-1.1.0.patch"
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/1940528/+attachment/5519059/+files/lp1940528-openssl-use-OPENSSL_init_ssl-with-1.1.0.patch
--
You received this bug notification because you are a member of Ubuntu
11 matches
Mail list logo
