severity 658896 serious
thanks
justification: Breaks unrelated software. It renders sudo unusable on systems 
with LDAP/PAM

On 21/01/13 05:31, Trek wrote:
> Hi,
> 
> can you try to downgrade libgcrypt11 to the version 1.4.6-9?
> You can download it from:
> 
> http://snapshot.debian.org/archive/debian/20110807T212024Z/pool/main/libg/libgcrypt11/
> 
> 
> this resolved a bug using claws-mail and midori with libgcrypt 1.5,
> that seems to have problems with its memory management:
> 
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640123
> 
> 
> If this is the case, may be that libgcrypt11 should be downgraded
> before wheezy is released.
> 
> 
> Ciao!
> 
> 
> 

Downgrading fix nothing.


What fixed the issue was applying the patch 
no_global_init_during_thread_callbacks.diff
from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658896#28


I'm attaching the debdiff. I rebuilt libgcrypt11 with the attached debdiff.
After installing it, sudo works as expected.


I'm raising the severity another time. I think it was lowered automatically 
with the forcemerge.

This should be fixed before releasing Wheezy. Because of this bug, sudo is not 
usable on
systems configured with LDAP/PAM (which is a setup widely used).


Thanks!
diff -Nru libgcrypt11-1.5.0/debian/changelog libgcrypt11-1.5.0/debian/changelog
--- libgcrypt11-1.5.0/debian/changelog	2011-09-01 18:54:26.000000000 +0200
+++ libgcrypt11-1.5.0/debian/changelog	2013-01-23 12:56:44.000000000 +0100
@@ -1,3 +1,11 @@
+libgcrypt11 (1.5.0-3.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * debian/patches/13_no_global_init_during_thread_callbacks.diff
+    Closes: #658896
+
+ -- Carlos Alberto Lopez Perez <[email protected]>  Wed, 23 Jan 2013 12:49:54 +0100
+
 libgcrypt11 (1.5.0-3) unstable; urgency=low
 
   * Upload to unstable.
diff -Nru libgcrypt11-1.5.0/debian/patches/13_no_global_init_during_thread_callbacks.diff libgcrypt11-1.5.0/debian/patches/13_no_global_init_during_thread_callbacks.diff
--- libgcrypt11-1.5.0/debian/patches/13_no_global_init_during_thread_callbacks.diff	1970-01-01 01:00:00.000000000 +0100
+++ libgcrypt11-1.5.0/debian/patches/13_no_global_init_during_thread_callbacks.diff	2013-01-23 12:52:48.000000000 +0100
@@ -0,0 +1,11 @@
+--- a/src/global.c
++++ b/src/global.c
+@@ -445,8 +445,6 @@
+ 
+     case GCRYCTL_SET_THREAD_CBS:
+       err = ath_install (va_arg (arg_ptr, void *), any_init_done);
+-      if (! err)
+-	global_init ();
+       break;
+ 
+     case GCRYCTL_FAST_POLL:
diff -Nru libgcrypt11-1.5.0/debian/patches/series libgcrypt11-1.5.0/debian/patches/series
--- libgcrypt11-1.5.0/debian/patches/series	2011-08-30 20:00:23.000000000 +0200
+++ libgcrypt11-1.5.0/debian/patches/series	2013-01-23 12:55:47.000000000 +0100
@@ -1 +1,2 @@
 12_lessdeps_libgcrypt-config.diff
+13_no_global_init_during_thread_callbacks.diff

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to