[Pkg-openssl-devel] bug 415788: postfix smtpd segfault

[Robert Bihlmeyer]

severity 415788 grave
thanks

ObSeverity: this affects default installations (which have TLS on) in current
etch. Non-running smtpd is "mostly unusable", IMO.

It seems that libpostfix-tls.so.1 was compiled against a version of
libssl0.9.8 that contains symbols that are not included in the version
currently in etch (0.9.8c-4):

$ gcc -o /dev/null /usr/lib/libpostfix-tls.so.1 
/usr/lib/gcc/i486-linux-gnu/4.1.2/../../../../lib/crt1.o: In function `_start':
../sysdeps/i386/elf/start.S:115: undefined reference to `main'
/usr/lib/libpostfix-tls.so.1: undefined reference to `SSL_CTX_sess_set_new_cb at OPENSSL_0.9.8'
/usr/lib/libpostfix-tls.so.1: undefined reference to `var_tls_daemon_rand_bytes'
/usr/lib/libpostfix-tls.so.1: undefined reference to `SSL_CTX_sess_set_get_cb at OPENSSL_0.9.8'
/usr/lib/libpostfix-tls.so.1: undefined reference to `SSL_CTX_set_info_callback at OPENSSL_0.9.8'
/usr/lib/libpostfix-tls.so.1: undefined reference to `BIO_set_callback at OPENSSL_0.9.8'
collect2: ld returned 1 exit status

The current sid version of libssl0.9.8 (0.9.8e-4) includes these symbols. I
guess the root cause is libssl0.9.8 not providing a correct shlibs file.
Please clone/reassign in this case.

Etch will no longer be affected when 0.9.8e-4 migrates. If that is not
imminent, maybe postfix should work around this by building with the older
libssl0.9.8?

Cheers,
-- 
Robbe