[Pkg-openssl-devel] Bug#1110254: libssl3: segfault in libcrypto.so.3

[Jim Barber]

Package: libssl3
Version: 3.0.17-1~deb12u1
Severity: normal
X-Debbugs-Cc: jim.barber.73 at gmail.com, team at security.debian.org

Dear Maintainer,

After upgrading openssl and its related packages (this one) from version
3.0.16-1~deb12u1 to 3.0.17-1~deb12u1 my sabnzbdplus package crashed on a
restart.

I saw errors like the following:

sabnzbdplus: segfault at 7fc2ec116 ip 00007fc2f68af8d0 sp
00007fc25a7f35b0 error 4 in libcrypto.so.3[7fc2f66c5000+27c000] likely
on CPU 2 (core 0, socket 0)
kernel: Code: 51 ff ff ff e8 41 d7 e1 ff 90 55 53 48 83 ec 08 48 85 ff
0f 84 81 00 00 00 48 89 fb 48 8b 07 48 8b 7f 10 48 83 7b 08 00 74 60
<ff> 90 c0 00 00 00 48 83 7b 08 00 89 c5 74 46 48 8b 7b 40 48 8b 35

kernel: traps: sabnzbdplus[3456936] general protection fault
ip:7f99f2eaf8d0 sp:7f99587ef5b0 error:0 in
libcrypto.so.3[7f99f2cc5000+27c000]

The openssl packages were the only change.
On re-installing the older 3.0.16-1~deb12u1 packages again, sabnzbdplus
could start again.

-- System Information:
Debian Release: 12.11
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 'stable'), (600, 'testing'), (500, 'testing-security')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-21-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libssl3 depends on:
ii  libc6  2.36-9+deb12u10

libssl3 recommends no packages.

libssl3 suggests no packages.

-- no debconf information