Your message dated Sat, 03 Nov 2007 14:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#430583: fixed in openssl 0.9.8g-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: libssl0.9.8
Version: 0.9.8e-5
Severity: important

with a pax-enabled kernel ssh aborts with the following error message:
ssh: error while loading shared libraries: libcrypto.so.0.9.8: cannot
enable executable stack as shared object requires: Permission denied

After removing the flag with execstack ssh works as expected.

Further information:
http://www.redhat.com/archives/fedora-devel-list/2005-March/msg00460.html
http://www.gentoo.org/proj/en/hardened/gnu-stack.xml

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (100, 'unstable'), (100, 'testing'), (100, 'stable'), (50, 
'experimental')
Architecture: powerpc (ppc)

Kernel: Linux 2.6.21.5-grsec-pinealgland
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libssl0.9.8 depends on:
ii  debconf [debconf-2.0]         1.5.13     Debian configuration management sy
ii  libc6                         2.5-11     GNU C Library: Shared libraries
ii  zlib1g                        1:1.2.3-15 compression library - runtime

libssl0.9.8 recommends no packages.

-- debconf information excluded


--- End Message ---
--- Begin Message ---
Source: openssl
Source-Version: 0.9.8g-2

We believe that the bug you reported is fixed in the latest version of
openssl, which is due to be installed in the Debian FTP archive:

libcrypto0.9.8-udeb_0.9.8g-2_amd64.udeb
  to pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-2_amd64.udeb
libssl-dev_0.9.8g-2_amd64.deb
  to pool/main/o/openssl/libssl-dev_0.9.8g-2_amd64.deb
libssl0.9.8-dbg_0.9.8g-2_amd64.deb
  to pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-2_amd64.deb
libssl0.9.8_0.9.8g-2_amd64.deb
  to pool/main/o/openssl/libssl0.9.8_0.9.8g-2_amd64.deb
openssl_0.9.8g-2.diff.gz
  to pool/main/o/openssl/openssl_0.9.8g-2.diff.gz
openssl_0.9.8g-2.dsc
  to pool/main/o/openssl/openssl_0.9.8g-2.dsc
openssl_0.9.8g-2_amd64.deb
  to pool/main/o/openssl/openssl_0.9.8g-2_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Kurt Roeckx <[EMAIL PROTECTED]> (supplier of updated openssl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 03 Nov 2007 13:25:45 +0100
Source: openssl
Binary: libssl-dev openssl libssl0.9.8-dbg libcrypto0.9.8-udeb libssl0.9.8
Architecture: source amd64
Version: 0.9.8g-2
Distribution: unstable
Urgency: low
Maintainer: Debian OpenSSL Team <[EMAIL PROTECTED]>
Changed-By: Kurt Roeckx <[EMAIL PROTECTED]>
Description: 
 libcrypto0.9.8-udeb - crypto shared library - udeb (udeb)
 libssl-dev - SSL development libraries, header files and documentation
 libssl0.9.8 - SSL shared libraries
 libssl0.9.8-dbg - Symbol tables for libssl and libcrypto
 openssl    - Secure Socket Layer (SSL) binary and related cryptographic tools
Closes: 424362 428051 430583
Changes: 
 openssl (0.9.8g-2) unstable; urgency=low
 .
   * Avoid text relocations on i386 caused by the assembler versions:
     - x86unix.pl: Create a function_begin_B_static to create a
       static/local assembler function.
     - aes-586.pl: Use the function_begin_B_static for _x86_AES_decrypt
       so that it doesn't get exported and doesn't have any (text) relocations.
     - aes-586.pl: Set up ebx to point to the GOT and call AES_set_encrypt_key
       via the PLT to avoid a relocation.
     - x86unix.pl: Call the init function via the PLT, avoiding a relocation
       in case of a PIC object.
     - cbc.pl: Call functions via the PLT.
     - desboth.pl: Call DES_encrypt2 via the PLT.
   * CA.sh should use the v3_ca extention when called with -newca
     (Closes: #428051)
   * Use -Wa,--noexecstack for all arches in Debian.  (Closes: #430583)
   * Convert the failure message when services fail restart to a debconf
     message.
   * To restart a service, just restart, instead of stop and start.
     Hopefully fixes #444946
   * Also remove igetest from the test dir in the clean target.
     (Closes: #424362)
Files: 
 68379f70665b036cf4cd6a89941f166a 797 utils optional openssl_0.9.8g-2.dsc
 bfa67b04cd668daa4b47f7d7304e5ea8 50227 utils optional openssl_0.9.8g-2.diff.gz
 16d28e8cc406df30ca76956c3c7b4e13 1027930 utils optional 
openssl_0.9.8g-2_amd64.deb
 03ecfd134567509c844da83d5a25dee4 943886 libs important 
libssl0.9.8_0.9.8g-2_amd64.deb
 6ecb8f2e7d9eff0f00e09bcfb67d21c7 617344 debian-installer optional 
libcrypto0.9.8-udeb_0.9.8g-2_amd64.udeb
 11c1a1fdcd2b94b25c74bad56b734542 2200534 libdevel optional 
libssl-dev_0.9.8g-2_amd64.deb
 d54a65cd25563b28592263672654d375 1608774 libdevel extra 
libssl0.9.8-dbg_0.9.8g-2_amd64.deb
Package-Type: udeb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHLIAdQdwckHJElwsRAr59AJwO9VeHd53JpxTxuOBnP1ITPJfwWwCg44RH
4VOj/i3zplT0Q4zy1NyOvhw=
=ZXOR
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to