[Bug 558913] Re: Cryptsutup out of date in Lucid

papukaija 558913 at bugs.launchpad.net
Thu Nov 3 22:30:09 UTC 2011


** Tags added: lucid

** Changed in: cryptsetup (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/558913

Title:
  Cryptsutup out of date in Lucid

Status in “cryptsetup” package in Ubuntu:
  Confirmed

Bug description:
  Binary package hint: cryptsetup

  Cryptsetup is sill at 1.1.0-rc2 in Lucid. this is a _Release Candidate_ not a stable build. Using a _Release Candidate_ for a core cryptography is a horrid idea. Cryptsetup-1.1.0 _stable_ has been out since  Jan 17 2010. There have also been 2 more releases rc3 and rc4 which fixed a lot of bugs, followed by the final _STABLE_ release. Upgrading the package should be trivial and painless for a package maintainer as it is the same version, only with bugs fixed. Cryptography is unforgiving, if it was a media manager it would be a different story, Using _Release Candidate_ cryptography software that is a core package , and the main package that configures disk encryption is a very *BAD* idea.
  This bug is a security vulnerability, please do not unmark it as one unless you can explain why using buggy cryptography software is secure.
  Have a look at the bugs http://code.google.com/p/cryptsetup/issues/list?can=1&q=&colspec=ID+Type+Status+Priority+Milestone+Owner+Summary&cells=tiles

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/558913/+subscriptions




More information about the foundations-bugs mailing list