[Pkg-utopia-maintainers] Bug#963948: Bug#963948: failed to start with status=11/SEGV

[Michael Biebl]

Control: found -1 0.8.2-2
Control: notfound -1 0.8.2-1
Control: severity -1 serious

Hello

Am 29.06.20 um 05:43 schrieb Ernesto Domato:
> After upgrading from 0.8.2-1 to 0.8.2-2, firewalld doesn't work anymore and
> systemd status command says:
> 
> ● firewalld.service - firewalld - dynamic firewall daemon
>      Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; vendor
> preset: enabled)
>      Active: failed (Result: signal) since Sun 2020-06-28 22:42:27 -03; 1h 7min
> ago
>        Docs: man:firewalld(1)
>     Process: 7218 ExecStart=/usr/sbin/firewalld --nofork --nopid (code=killed,
> signal=SEGV)
>    Main PID: 7218 (code=killed, signal=SEGV)
> 
> jun 28 22:42:26 linux systemd[1]: Starting firewalld - dynamic firewall
> daemon...
> jun 28 22:42:27 linux systemd[1]: Started firewalld - dynamic firewall daemon.
> jun 28 22:42:27 linux systemd[1]: firewalld.service: Main process exited,
> code=killed, status=11/SEGV
> jun 28 22:42:27 linux systemd[1]: firewalld.service: Failed with result
> 'signal'.

Thanks your bug report.
This is a known issue, caused by the latest libmount1 update, which
pulls libjson-c into firewalld's address space. firewalld, via
libnftables, also uses libjansson, another JSON library. And as it turns
out, those two libraries have a symbol clash.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=963932

You have a couple of options to mitigate this issue for now:
a/ downgrade firewalld (to a version where iptables was still the
default backend)
b/ downgrade libmount1 to 2.35.2-4 from testing and put that package on hold
c/ edit /etc/firewalld/firewalld.conf and set FirewallBackend=iptables

I do not really recommend c/, as you might forgot to undo that change,
once the symbol clash has been fixed.

Michael



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20200629/10ed97f0/attachment.sig>