[Pkg-openssl-devel] Bug#948987: libssl: libssl1.1 segfaults when kopete is using it (libjingle-call)

[Jens Schmidt]

Package: libssl1.1
Version: 1.1.1d-0+deb10u2
Severity: critical
File: libssl
Justification: breaks unrelated software

Dear Maintainer,

when using kopete, dmesg shows a shitload of:
[timestamp] libjingle-call[11878]: segfault at 48 ip 00007f693f599ed3 sp 00007fff4db27280 error 4 in libcrypto.so.1.1[7f693f561000+19e000]
[timestamp] Code: 40 24 01 00 00 00 4c 89 e2 c7 40 50 01 00 00 00 0f ae f0 e8 af 83 fc ff 85 c0 74 6c e8 76 9a fc ff 48 89 43 70 48 85 c0 74 2d <48> 8b 45 48 48 85 c0 74 74 48 89 df ff d0 85 c0 0f 84 a7 00 00 00

I assume this is not intended behaviour.

This is reproduceable on all (7) of our workstations. Same hardware, same software.

Regards
Jens


-- System Information:
Debian Release: 10.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.3.0-0.bpo.2-amd64 (SMP w/16 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libssl1.1:amd64 depends on:
ii  debconf [debconf-2.0]  1.5.71
ii  libc6                  2.28-10

libssl1.1:amd64 recommends no packages.

libssl1.1:amd64 suggests no packages.

-- debconf information:
  libssl1.1/restart-services:
  libssl1.1/restart-failed: