Bug#1108530: e2guardian crash with segfault

Simone Piccardi piccardi at truelite.it
Mon Jun 30 16:18:38 BST 2025 

Package: e2guardian
Version: 5.5.8-1
Severity: normal
X-Debbugs-Cc: piccardi at truelite.it

Dear Maintainer,

after some use from clients, it crash, I got this error on dmesg.

e2guardian[1188]: segfault at 7fec5c012061 ip 00007feb7d8bef36 sp
00007feb2afda1d8 error 4 in libc.so.6[b4f36,7feb7d832000+165000]
likely on CPU 1 (core 1, socket 0)

This make the package almost inusable.

-- System Information:
Debian Release: 13.0
  APT prefers testing-security
  APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.33+deb13-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages e2guardian depends on:
ii  adduser              3.152
ii  clamav-daemon        1.4.2+dfsg-1
ii  init-system-helpers  1.68
ii  libc6                2.41-9
ii  libgcc-s1            14.2.0-19
ii  libpcre2-posix3      10.45-1
ii  libssl3t64           3.5.0-2
ii  libstdc++6           14.2.0-19
ii  perl                 5.40.1-3
ii  zlib1g               1:1.3.dfsg+really1.3.1-1+b1

e2guardian recommends no packages.

Versions of packages e2guardian suggests:
ii  squid  6.13-2

-- Configuration Files:
/etc/e2guardian/e2guardian.conf changed:
language = 'italian'
languagedir = '/usr/share/e2guardian/languages'
cacertificatepath = '/etc/e2guardian/private/ca.pem'
caprivatekeypath = '/etc/e2guardian/private/ca.key'
certprivatekeypath = '/etc/e2guardian/private/cert.key'
generatedcertpath = '/etc/e2guardian/private/generatedcerts/'
sitelist = 'name=nomitm,path=__LISTDIR__/nomitmsitelist'
ipsitelist = 'name=nomitm,path=__LISTDIR__/nomitmsiteiplist'
maplist = 'name=defaultusermap, path=__LISTDIR__/../authplugins/filtergroupslist'
ipmaplist = 'name=ipmap, path=__LISTDIR__/../authplugins/ipgroups'
maplist = 'name=portmap, path=__LISTDIR__/../authplugins/portgroups'
iplist = 'name=bannedclient,messageno=100,logmessageno=103,path=__LISTDIR__/bannediplist'
iplist = 'name=exceptionclient,messageno=600,path=__LISTDIR__/exceptioniplist'
reverseclientiplookups = off
ipsitelist = 'name=authexception,messageno=602,path=__LISTDIR__/authexceptioniplist'
sitelist = 'name=authexception,messageno=602,path=__LISTDIR__/authexceptionsitelist'
urllist = 'name=authexception,messageno=603,path=__LISTDIR__/authexceptionurllist'
regexpboollist = 'name=browser,path=__LISTDIR__/browserregexplist'
dstatlocation = '/var/log/e2guardian/dstats.log'
reverseaddresslookups = off
downloadmanager = '/etc/e2guardian/downloadmanagers/default.conf'
weightedphrasemode = 2
 # This is a connection timeout
 # For slow remote sites you may need to increase this to 10 or more.
 # if always using a local proxy decrease this setting to 5
originalip = off
loglevel = 1
maxchildren = 600
minchildren = 20
preforkchildren = 10
maxsparechildren = 35
maxagechildren = 1000
httpworkers = 1024
accessdeniedaddress = 'http://marea.fusslab.blz/cgi-bin/e2guardian.pl'
forwardedfor = on
dstatinterval = 300
proxyip = 127.0.0.1
proxyport = 3128

/etc/e2guardian/e2guardianf1.conf changed:
storyboard = '/etc/e2guardian/examplef1.story'   # comment out for production
.Define LISTDIR </etc/e2guardian/lists/example.group>  # comment out for production 
 
naughtynesslimit = 100
sitelist = 'name=nocheckcert,path=__LISTDIR__/nocheckcertsitelist'
ipsitelist = 'name=nocheckcert,path=__LISTDIR__/nocheckcertsiteiplist'
sitelist = 'name=greyssl,path=__LISTDIR__/greysslsitelist'
ipsitelist = 'name=greyssl,path=__LISTDIR__/greysslsiteiplist'
sitelist = 'name=localgreyssl,path=__LISTDIR__/localgreysslsitelist'
sitelist = 'name=semiexception,messageno=602,path=__LISTDIR__/semiexceptionsitelist'
ipsitelist = 'name=semiexception,messageno=602,path=__LISTDIR__/semiexceptionsiteiplist'
sitelist = 'name=exception,messageno=602,path=__LISTDIR__/exceptionsitelist'
ipsitelist = 'name=exception,messageno=602,path=__LISTDIR__/exceptionsiteiplist'
urllist = 'name=exception,messageno=603,path=__LISTDIR__/exceptionurllist'
regexpboollist = 'name=exception,messageno=609,path=__LISTDIR__/exceptionregexpurllist'
sitelist = 'name=grey,path=__LISTDIR__/greysitelist'
ipsitelist = 'name=grey,path=__LISTDIR__/greysiteiplist'
urllist = 'name=grey,path=__LISTDIR__/greyurllist'
sitelist = 'name=banned,messageno=500,path=__LISTDIR__/bannedsitelist'
ipsitelist = 'name=banned,messageno=510,path=__LISTDIR__/bannedsiteiplist'
urllist = 'name=banned,messageno=501,path=__LISTDIR__/bannedurllist'
regexpboollist = 'name=banned,messageno=503,path=__LISTDIR__/bannedregexpurllist'
sitelist = 'name=localsemiexception,messageno=602,path=__LISTDIR__/localsemiexceptionsitelist'
ipsitelist = 'name=localsemiexception,messageno=602,path=__LISTDIR__/localsemiexceptionsiteiplist'
sitelist = 'name=localexception,messageno=662,path=__LISTDIR__/localexceptionsitelist'
ipsitelist = 'name=localexception,messageno=662,path=__LISTDIR__/localexceptionsiteiplist'
urllist = 'name=localexception,messageno=663,path=__LISTDIR__/localexceptionurllist'
sitelist = 'name=localgrey,path=__LISTDIR__/localgreysitelist'
ipsitelist = 'name=localgrey,path=__LISTDIR__/localgreysiteiplist'
urllist = 'name=localgrey,path=__LISTDIR__/localgreyurllist'
sitelist = 'name=localbanned,messageno=560,path=__LISTDIR__/localbannedsitelist'
ipsitelist = 'name=localbanned,messageno=560,path=__LISTDIR__/localbannedsiteiplist'
urllist = 'name=localbanned,messageno=561,path=__LISTDIR__/localbannedurllist'
fileextlist = 'name=bannedextension,messageno=900,path=__LISTDIR__/bannedextensionlist'
mimelist = 'name=bannedmime,messageno=800,path=__LISTDIR__/bannedmimetypelist'
sitelist = 'name=exceptionfile,path=__LISTDIR__/exceptionfilesitelist'
ipsitelist = 'name=exceptionfile,path=__LISTDIR__/exceptionfilesiteiplist'
urllist = 'name=exceptionfile,path=__LISTDIR__/exceptionfileurllist'
regexpboollist = 'name=banneduseragent,messageno=522,path=__LISTDIR__/bannedregexpuseragentlist'
regexpboollist = 'name=exceptionuseragent,messageno=610,path=__LISTDIR__/exceptionregexpuseragentlist'
sitelist = 'name=refererexception,messageno=620,path=__LISTDIR__/refererexceptionsitelist'
ipsitelist = 'name=refererexception,messageno=620,path=__LISTDIR__/refererexceptionsiteiplist'
urllist = 'name=refererexception,messageno=620,path=__LISTDIR__/refererexceptionurllist'
sitelist = 'name=embededreferer,path=__LISTDIR__/../common/embededreferersitelist'
ipsitelist = 'name=embededreferer,path=__LISTDIR__/../common/embededreferersiteiplist'
urllist = 'name=embededreferer,path=__LISTDIR__/../common/embededrefererurllist'
regexpreplacelist = 'name=change,path=__LISTDIR__/urlregexplist'
regexpreplacelist = 'name=sslreplace,path=__LISTDIR__/sslsiteregexplist'
regexpreplacelist = 'name=redirect,path=__LISTDIR__/urlredirectregexplist'
sitelist = 'name=nolog,path=__LISTDIR__//../common/nologsitelist'
ipsitelist = 'name=nolog,path=__LISTDIR__//../common/nologsiteiplist'
urllist = 'name=nolog,path=__LISTDIR__//../common/nologurllist'
regexpboollist = 'name=nolog,path=__LISTDIR__//../common/nologregexpurllist'
fileextlist = 'name=nolog,path=__LISTDIR__//../common/nologextensionlist'
categorylist = 'name=alert,path=__LISTDIR__/alertcategorylist'
categorydisplaythreshold = 0
bannedphraselist = '__LISTDIR__/bannedphraselist'
weightedphraselist = '__LISTDIR__/weightedphraselist'
exceptionphraselist = '__LISTDIR__/exceptionphraselist'
regexpreplacelist = 'name=searchterms,path=__LISTDIR__/../common/searchregexplist'
regexpboollist = 'name=searchtermexceptions, path=__LISTDIR__/../common/searchexceptionregexplist'
searchlist = 'name=banned,path=__LISTDIR__/bannedsearchlist'
searchlist = 'name=override,path=__LISTDIR__/bannedsearchoveridelist'
searchlist = 'name=localbanned,messageno=581,path=__LISTDIR__/localbannedsearchlist'
regexpreplacelist = 'name=headermods,path=__LISTDIR__/headerregexplist'
regexpboollist = 'name=bannedheader,path=__LISTDIR__/bannedregexpheaderlist'
regexpboollist = 'name=exceptionheader,path=__LISTDIR__/exceptionregexpheaderlist'
regexpreplacelist = 'name=addheader,path=__LISTDIR__/addheaderregexplist'
regexpreplacelist = 'name=responseheadermods,path=__LISTDIR__/responseheaderregexplist'
bypassversion = 2
cgikey = 'you must change this text in order to be secure'
sitelist = 'name=bannedbypass,messageno=500,path=__LISTDIR__/domainsnobypass'

/etc/logrotate.d/e2guardian changed:
/var/log/e2guardian/access.log {
	rotate 365
	daily
	missingok
	prerotate
		invoke-rc.d e2guardian stop > /dev/null 2>&1 || true
	endscript
	postrotate
		invoke-rc.d e2guardian start > /dev/null 2>&1
	endscript
	compress
}


-- no debconf information

More information about the Debian-edu-pkg-team mailing list