Your message dated Sun, 23 Oct 2005 06:47:09 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#334935: fixed in crypt-ssleay 0.51-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 21 Oct 2005 00:00:34 +0000
>From [EMAIL PROTECTED] Thu Oct 20 17:00:34 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mylar.outflux.net [69.93.193.226] 
        by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
        id 1ESkKo-0001xc-00; Thu, 20 Oct 2005 17:00:34 -0700
Received: from localhost.localdomain (serenity-end.outflux.net [10.2.0.2])
        by mylar.outflux.net (8.13.5/8.13.5/Debian-3) with ESMTP id 
j9L00R1r002409
        (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO);
        Thu, 20 Oct 2005 17:00:32 -0700
Received: from nemesis by localhost.localdomain with local (Exim 4.52)
        id 1ESkV8-0002Q8-FG; Thu, 20 Oct 2005 17:11:14 -0700
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Kees Cook <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: libssl0.9.8: libcrypt-ssleay-perl seg faults via https addresses
X-Mailer: reportbug 3.17
Date: Thu, 20 Oct 2005 17:11:14 -0700
Message-Id: <[EMAIL PROTECTED]>
X-MIMEDefang-Filter: outflux$Revision: 1.218 $
X-HELO: localhost.localdomain
X-Scanned-By: MIMEDefang 2.53 on 10.2.0.1
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: libssl0.9.8
Version: 0.9.8a-2
Severity: grave
Justification: renders package unusable


There is a seg fault when using Perl LWP to access https sites:

#0  0xb7dc3942 in SSL_CTX_ctrl () from /usr/lib/i686/cmov/libssl.so.0.9.8
#1  0xb7de07de in XS_Crypt__SSLeay__CTX_new ()
   from /usr/lib/perl5/auto/Crypt/SSLeay/SSLeay.so
#2  0x080c0ad0 in Perl_pp_entersub ()
#3  0x080b95ba in Perl_runops_standard ()
#4  0x08064e43 in perl_run ()
#5  0x0805fd4f in main ()

For example:

$ perl -MHTTP::Request -MLWP::UserAgent -e '
    $agent = LWP::UserAgent->new();
    $request  = HTTP::Request->new("GET" => "https://www.osdl.org/";);
    $response = $agent->request($request);
'
Segmentation fault


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686-smp
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libssl0.9.8 depends on:
ii  debconf [debconf-2.0]         1.4.58     Debian configuration management sy
ii  libc6                         2.3.5-6    GNU C Library: Shared libraries an

libssl0.9.8 recommends no packages.

-- debconf information:
  libssl0.9.8/restart-services:

---------------------------------------
Received: (at 334935-close) by bugs.debian.org; 23 Oct 2005 13:48:26 +0000
>From [EMAIL PROTECTED] Sun Oct 23 06:48:26 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
        id 1ETgBp-0005cw-00; Sun, 23 Oct 2005 06:47:09 -0700
From: =?utf-8?b?Tm/DqGwgS8O2dGhl?= <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#334935: fixed in crypt-ssleay 0.51-5
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Sun, 23 Oct 2005 06:47:09 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: crypt-ssleay
Source-Version: 0.51-5

We believe that the bug you reported is fixed in the latest version of
crypt-ssleay, which is due to be installed in the Debian FTP archive:

crypt-ssleay_0.51-5.diff.gz
  to pool/main/c/crypt-ssleay/crypt-ssleay_0.51-5.diff.gz
crypt-ssleay_0.51-5.dsc
  to pool/main/c/crypt-ssleay/crypt-ssleay_0.51-5.dsc
libcrypt-ssleay-perl_0.51-5_i386.deb
  to pool/main/c/crypt-ssleay/libcrypt-ssleay-perl_0.51-5_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Noèl Köthe <[EMAIL PROTECTED]> (supplier of updated crypt-ssleay package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 23 Oct 2005 15:33:32 +0200
Source: crypt-ssleay
Binary: libcrypt-ssleay-perl
Architecture: source i386
Version: 0.51-5
Distribution: unstable
Urgency: low
Maintainer: Noèl Köthe <[EMAIL PROTECTED]>
Changed-By: Noèl Köthe <[EMAIL PROTECTED]>
Description: 
 libcrypt-ssleay-perl - Support for https protocol in LWP
Closes: 334935 334938
Changes: 
 crypt-ssleay (0.51-5) unstable; urgency=low
 .
   * Thanks for this "we dont inform mainatiner about this NMU":(
     Closes: #334938, #334935
Files: 
 454392d4db716f642bf325f4cc1bf786 631 perl optional crypt-ssleay_0.51-5.dsc
 2d9a54e424974805aa84e41ed971211f 2732 perl optional crypt-ssleay_0.51-5.diff.gz
 2a6d01f286186e85e405063b7a4c1ea8 48544 perl optional 
libcrypt-ssleay-perl_0.51-5_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDW5GY9/DnDzB9Vu0RArdRAJ4l/OaeOdG1hxGV0d8L2UaJXpimTACffOW0
G3ogsaCFuqweAzb35rM/bhk=
=IwCM
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to