[Bug 861907] New: gnutls fails with certain ssl connections while openssl succeeds.
https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c0 Summary: gnutls fails with certain ssl connections while openssl succeeds. Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: shchang@suse.com ReportedBy: mrueckert@suse.com QAContact: qa-bugs@suse.de CC: meissner@suse.com, ailin.nemui@gmail.com Found By: --- Blocker: --- most notably with empathy and jabber servers using older openssl. "got error: wocky-tls-error (#0): TLS Negotiated: -26: GNUTLS_E_DECOMPRESSION_FAILED: -26: GNUTLS_E_DECOMPRESSION_FAILED" as another example: http://web.archiveorange.com/archive/v/hMp6yJpqYJkWSkAIORig the linked gnutls package from the project was 3.2.1 while 13.1 ships 3.2.4. could this be a fallout from our EC disable patches maybe or is that a regression between the 2 versions? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c1 Stefan Bühler <stbuehler@web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |stbuehler@web.de --- Comment #1 from Stefan Bühler <stbuehler@web.de> 2014-02-06 11:08:36 UTC --- Upstream commit https://gitorious.org/gnutls/gnutls/commit/1667d2eecd4094a239db9f5ae54990d4c... (gnutls_3_2_2-29-g1667d2e) broke inflating (it allocates a buffer with the incoming record's size, which has some overhead but not enough to ensure inflate has always enough space). Upstream fixed it in https://gitorious.org/gnutls/gnutls/commit/172ae00887559fa5ba9a3bdc41d9eccb4... (gnutls_3_2_6-116-g172ae00). This means all releases >= 3.2.3 and <= 3.2.6 are broken. Proposed fix: revert 1667d2eecd4094a239db9f5ae54990d4c270c52a, as it is closer to the code in 3.2.4 See: https://build.opensuse.org/request/show/221106 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c Stefan Bühler <stbuehler@web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |maintenance@opensuse.org -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c2 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|maintenance@opensuse.org | --- Comment #2 from Benjamin Brunner <bbrunner@suse.com> 2014-02-06 12:29:12 CET --- Thanks. I've started an update. See openSUSE:Maintenance:2541 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c3 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #3 from Benjamin Brunner <bbrunner@suse.com> 2014-02-13 10:42:08 CET --- Update released for openSUSE 13.1. Resolved fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c4 --- Comment #4 from Swamp Workflow Management <swamp@suse.de> 2014-02-13 10:04:32 UTC --- openSUSE-RU-2014:0232-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 861907 CVE References: Sources used: openSUSE 13.1 (src): gnutls-3.2.4-2.9.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com