Package: lighttpd-mod-mbedtls Version: 1.4.79-2 Severity: critical Justification: breaks unrelated software
Dear Maintainer, Since one particular update to mbedtls (aka Polar SSL) libraries they are no longer compatible with lighttpd-mod-mbedtls. Which causes Lighttpd with lighttpd-mod-mbedtls to crash. Here is output of gdb debugger: (gdb) run Starting program: /usr/sbin/lighttpd -D -f /etc/lighttpd/lighttpd.conf [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Program received signal SIGSEGV, Segmentation fault. 0x0000000000000000 in ?? () (gdb) (gdb) bt #0 0x0000000000000000 in ?? () #1 0x00007ff69596a455 in ?? () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #2 0x00007ff69596a85c in mbedtls_ctr_drbg_random_with_add () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #3 0x00007ff69596aaa3 in mbedtls_ctr_drbg_random () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #4 0x00007ff69596288d in mbedtls_mpi_core_fill_random () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #5 0x00007ff69596298f in mbedtls_mpi_core_random () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #6 0x00007ff6959723a5 in ?? () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #7 0x00007ff695972965 in ?? () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #8 0x00007ff6959741ef in mbedtls_ecp_mul () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #9 0x00007ff695974a97 in mbedtls_ecp_check_pub_priv () from /lib/x86_64-linux-gnu/libmbedcrypto.so.16 #10 0x00007ff695a3df16 in ?? () from /usr/lib/lighttpd/mod_mbedtls.so #11 0x00007ff695a3f898 in ?? () from /usr/lib/lighttpd/mod_mbedtls.so #12 0x00005603410e9f39 in plugins_call_init () #13 0x00005603410d62a1 in ?? () #14 0x00005603410d728a in main () -- System Information: Debian Release: 13.7 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.12.111+deb13-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages lighttpd-mod-mbedtls depends on: ii libc6 2.41-12+deb13u4 ii libmbedcrypto16 3.6.6-0.1~deb13u1 ii libmbedtls21 3.6.6-0.1~deb13u1 ii libmbedx509-7 3.6.6-0.1~deb13u1 ii lighttpd 1.4.79-2 lighttpd-mod-mbedtls recommends no packages. lighttpd-mod-mbedtls suggests no packages. -- no debconf information
