[Pkg-openssl-devel] Bug#1110254: Bug#1110254: libssl3: segfault in libcrypto.so.3

[Jim Barber]

> Jim, can you confirm this?

Hi Sebastian.

I'm happy to give it a go, but will need a bit of guidance since I'm
not a Debian developer.

I cloned the repo via `git clone
https://salsa.debian.org/debian/openssl.git` , but I'm not sure what
branch to go to before I try to revert those commits.
I ran a `git tag -l` and I saw a tag for
`debian/openssl-3.0.16-1_deb12u1` but not one for
`debian/openssl-3.0.17-1_deb12u1`
Do I just use the `debian/bookworm` branch instead? That's definitely
version 3.0.17, but it might not have the deb12-u1 changes? I can't
tell because the Debian changelog for the deb12u1 package wasn't
updated.

Or perhaps I'm just going about things in completely the wrong way?

I also downloaded the source package by adding the following to my
/etc/apt/sources.list file:
```
deb-src https://deb.debian.org/debian bookworm-updates main non-free contrib
```
And then used `apt-get source openssl` to download the package source.
But this isn't a git repository of course, so I don't know if there
are Debian tools that can be used to give a git commit hash and have
the tool revert it from the package source.

Regards,
Jim Barber


On Mon, 4 Aug 2025 at 04:31, Sebastian Andrzej Siewior
<sebastian at breakpoint.cc> wrote:
>
>
>
> On 2 August 2025 17:24:36 CEST, Stefan Ehmann <shoesoft at gmx.net> wrote:
> >If I revert
> ><https://github.com/openssl/openssl/commit/340383f5f49f84ed802dac268e6c12971d837f75>
> >(and also 7141330fb98ceab643729f2d0f445f79f26addce), ebook-convert works fine again.
>
> Jim, can you confirm this?
>
> >
> >According to the comments, this is a bug in python. It is fixed in python 3.13, but there won't be an upstream backport to older versions.
> >
> >_______________________________________________
> >Pkg-openssl-devel mailing list
> >Pkg-openssl-devel at alioth-lists.debian.net
> >https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-openssl-devel
>
> --
> Sebastian