Bug#247763: Gossip crashes if SSL is enabled

Pedro Corte-Real Pedro Corte-Real <typo@netcabo.pt>, 247763@bugs.debian.org
Fri, 07 May 2004 13:29:05 +0100


--=-fQe+Ncp000meXur6eZ20
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Fri, 2004-05-07 at 07:53 +0100, Ross Burton wrote:
> Using reportbug so I could see the dependent packages would help,=20

Here you go. Sorry for that, Is there a command to generate this list
when I create bug reports? I prefer to use evolution to send bug
reports, I like to gpg sign my mail messages.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.4
Locale: LANG=3DC, LC_CTYPE=3Dpt_PT.UTF-8@euro
                                                                           =
                 =20
Versions of packages gossip depends on:
ii  libart-2.0-2              2.3.16-5       Library of functions for 2D gr=
aphi
ii  libatk1.0-0               1.6.1-1        The ATK accessibility toolkit
ii  libaudiofile0             0.2.6-3        Open-source version of SGI's a=
udio
ii  libbonobo2-0              2.6.0-1        Bonobo CORBA interfaces librar=
y
ii  libbonoboui2-0            2.6.0-2        The Bonobo UI library
ii  libc6                     2.3.2.ds1-12   GNU C Library: Shared librarie=
s an
ii  libesd0                   0.2.29-1       Enlightened Sound Daemon - Sha=
red
ii  libgconf2-4               2.6.1-1        GNOME configuration database s=
yste
ii  libgcrypt7                1.1.90-1.1     LGPL Crypto library - runtime =
libr
ii  libglade2-0               1:2.3.6-4      Library to load .glade files a=
t ru
ii  libglib2.0-0              2.4.1-1        The GLib library of C routines
ii  libgnome-keyring0         0.2.1-1        GNOME keyring services library
ii  libgnome2-0               2.6.1-1        The GNOME 2 library - runtime =
file
ii  libgnomecanvas2-0         2.6.0-4        A powerful object-oriented dis=
play
ii  libgnomeui-0              2.6.1-4        The GNOME 2 libraries (User In=
terf
ii  libgnomevfs2-0            2.6.1.1-2      The GNOME virtual file-system =
libr
ii  libgnutls10               1.0.4-3        GNU TLS library - runtime libr=
ary
ii  libgpg-error0             0.7-1          library for common error value=
s an
ii  libgtk2.0-0               2.4.0-4        The GTK+ graphical user interf=
ace
ii  libice6                   4.3.0.dfsg.1-1 Inter-Client Exchange library
ii  libjpeg62                 6b-9           The Independent JPEG Group's J=
PEG
ii  libloudmouth1-0           0.15-1         Lightweight C Jabber library
ii  liborbit2                 1:2.10.0-0.1   libraries for ORBit2 - a CORBA=
 ORB
ii  libpango1.0-0             1.4.0-2        Layout and rendering of intern=
atio
ii  libpopt0                  1.7-4          lib for parsing cmdline parame=
ters
ii  libsm6                    4.3.0.dfsg.1-1 X Window System Session Manage=
ment
ii  libtasn1-2                0.2.7-1        Manage ASN.1 structures (runti=
me)
ii  libx11-6                  4.3.0.dfsg.1-1 X Window System protocol clien=
t li
ii  libxext6                  4.3.0.dfsg.1-1 X Window System miscellaneous =
exte
ii  libxml2                   2.6.9-2        GNOME XML library
ii  libxslt1.1                1.1.5-1        XSLT processing library - runt=
ime
ii  xlibs                     4.3.0.dfsg.1-1 X Window System client librari=
es m
ii  zlib1g                    1:1.2.1-5      compression library - runtime
                                                                           =
                 =20
-- no debconf information


> but it
> appears that your loudmouth is too old.  Looking at the generated
> dependencies of gossip 0.7.5-4 it only depends on loudmouth >=3D 0.15 whe=
n
> it should be >=3D 0.16.

I'm probably wrong but my guess is that it's being built against the
wrong gnutls. Notice that while it depends on gnutls10 the gossip binary
links against both /usr/lib/libgnutls.so.7 and /usr/lib/libgnutls.so.10.
Looks like a recipe for disaster :).

> Upgrading libloudmouth1-0 to 0.16 from experimental will fix the crash I
> believe.

Doing "apt-get -t experimental install libloudmouth1-0" gives me:

libloudmouth1-0 is already the newest version.

> I think I understand what happened (I didn't do the built of gossip
> 0.7.5) and will rebuild shortly.
>=20
> Ross

Pedro.

--=-fQe+Ncp000meXur6eZ20
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBAm4ER2SBo0jBmgGARAtnFAJwNmg5vKsPLKoj4IgBJNsh1VAmVUwCfcJJ8
UZreZOOpb+UPauhRQwoEtqY=
=eetp
-----END PGP SIGNATURE-----

--=-fQe+Ncp000meXur6eZ20--