Public bug reported:

cups-browsed 2.0.0 segfaults on Ubuntu Noble - package not rebuilt
against libcups2t64 2.4.7

Package: cups-browsed
Version: 2.0.0-0ubuntu10.3
Architecture: amd64
Distribution: Ubuntu Noble 24.04

== Summary ==

cups-browsed 2.0.0 crashes repeatedly with SIGSEGV on Ubuntu Noble.
The package declares a dependency on libcups2t64 >= 2.0.2 but the
currently installed version is 2.4.7, which introduced API/ABI changes
that cups-browsed 2.0.0 was not built or tested against. cups-browsed
needs to be rebuilt against the current libcups2t64 2.4.7 as shipped
in noble-updates.

== Environment ==

  cups-browsed:  2.0.0-0ubuntu10.3
  libcups2t64:   2.4.7-1.2ubuntu7.9
  Ubuntu:        24.04 Noble
  Kernel:        (insert: uname -r)

== Observed Behavior ==

cups-browsed crashes with SIGSEGV within seconds to minutes of startup.
systemd restarts the service automatically, which crashes again, creating
a permanent crash loop. The crash occurs consistently at the same offset
in libcups.so.2:

  cups-browsed[PID]: segfault at 192 ip 0x...3439 sp 0x... error 6
  in libcups.so.2[...+5e000]

"error 6" indicates a write to an invalid address, consistent with a
NULL pointer dereference or use-after-free introduced by ABI changes
in libcups2t64 between 2.0.x and 2.4.x.

== Root Cause ==

cups-browsed 2.0.0 was built against libcups2t64 2.0.x and declares:

  Depends: libcups2t64 (>= 2.0.2)

libcups2t64 was updated to 2.4.7 in noble-updates/noble-security, but
cups-browsed was not rebuilt against it. The version constraint allows
the installation of the mismatched combination without warning, but the
resulting binary is unstable.

== Expected Behavior ==

cups-browsed should be rebuilt against libcups2t64 2.4.7 as part of
the noble-updates cycle, ensuring ABI compatibility. Alternatively the
dependency should be tightened to reflect the actual tested version.

== Fix ==

Rebuild cups-browsed against the currently installed libcups2t64 2.4.7:

  apt-get source cups-browsed
  apt-get build-dep cups-browsed
  cd cups-browsed-2.0.0/
  dpkg-buildpackage -b -uc -us
  dpkg -i ../cups-browsed_2.0.0-0ubuntu10.3_amd64.deb

== Impact ==

Any Ubuntu Noble system running cups-browsed with BrowsePoll against
a remote CUPS server is affected. cups-browsed is unusable in its
current state on noble-updates.

** Affects: cups-browsed (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2155146

Title:
  cups-browsed crashes every 30min

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-browsed/+bug/2155146/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to