[Bug 558913] Re: Cryptsutup out of date in Lucid
papukaija
558913 at bugs.launchpad.net
Thu Nov 3 22:30:09 UTC 2011
** Tags added: lucid
** Changed in: cryptsetup (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/558913
Title:
Cryptsutup out of date in Lucid
Status in “cryptsetup” package in Ubuntu:
Confirmed
Bug description:
Binary package hint: cryptsetup
Cryptsetup is sill at 1.1.0-rc2 in Lucid. this is a _Release Candidate_ not a stable build. Using a _Release Candidate_ for a core cryptography is a horrid idea. Cryptsetup-1.1.0 _stable_ has been out since Jan 17 2010. There have also been 2 more releases rc3 and rc4 which fixed a lot of bugs, followed by the final _STABLE_ release. Upgrading the package should be trivial and painless for a package maintainer as it is the same version, only with bugs fixed. Cryptography is unforgiving, if it was a media manager it would be a different story, Using _Release Candidate_ cryptography software that is a core package , and the main package that configures disk encryption is a very *BAD* idea.
This bug is a security vulnerability, please do not unmark it as one unless you can explain why using buggy cryptography software is secure.
Have a look at the bugs http://code.google.com/p/cryptsetup/issues/list?can=1&q=&colspec=ID+Type+Status+Priority+Milestone+Owner+Summary&cells=tiles
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/558913/+subscriptions
More information about the foundations-bugs
mailing list