[Bug 1834961] [NEW] "Ancient patch causes TLSv1.3 connection deadlock" (fix missing in 19.04)

[Daniel Danner]

Public bug reported:

Debian has introduced a fix for https://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=914034 in libwww-perl/6.36-2, which in turn has
been introduced to Ubuntu 19.10, but not to 19.04.

I don't know how Ubuntu normally handles such cases. But given the
severity of the issue and 19.04 not being EOL until 2020, I'm wondering
if users of 19.04 are going to receive the fix as well?

** Affects: libwww-perl (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: libwww-perl (Debian)
     Importance: Unknown
         Status: Unknown

** Bug watch added: Debian Bug tracker #914034
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914034

** Also affects: libwww-perl (Debian) via
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914034
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libwww-perl in Ubuntu.
https://bugs.launchpad.net/bugs/1834961

Title:
  "Ancient patch causes TLSv1.3 connection deadlock" (fix missing in
  19.04)

Status in libwww-perl package in Ubuntu:
  New
Status in libwww-perl package in Debian:
  Unknown

Bug description:
  Debian has introduced a fix for https://bugs.debian.org/cgi-
  bin/bugreport.cgi?bug=914034 in libwww-perl/6.36-2, which in turn has
  been introduced to Ubuntu 19.10, but not to 19.04.

  I don't know how Ubuntu normally handles such cases. But given the
  severity of the issue and 19.04 not being EOL until 2020, I'm
  wondering if users of 19.04 are going to receive the fix as well?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libwww-perl/+bug/1834961/+subscriptions