** Changed in: ca-certificates (Debian)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
https://bugs.launchpad.net/bugs/1914839
Title:
package upgrade should replace /etc/ssl/certs/ca-certificates.crt
atomically
Status in ca-certificates package in Ubuntu:
Confirmed
Status in ca-certificates package in Debian:
Fix Released
Bug description:
While upgrading the ca-certificates package, a process got the error:
SSL_ca_file /etc/ssl/certs/ca-certificates.crt does not exist
This file should be replaced atomically, with no time gap where the
file does not exist.
(I am flagging this as a security vulnerability because, while I did
not experience any security issue, I can imagine at least the
possibility of this being exploitable in some way in some
circumstances.)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1914839/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
