[Bug 2119094] Re: Segmentation fault crash on Ubuntu 24.04 with osslsigncode

[Christian Ehrhardt]

This was falling through the cracks AFICS, the Debian bug refers to
https://github.com/openssl/openssl/commit/39ea78379826fa98e8dc8c0d2b07e2c17cd68380
which seems reasonable but also I have a hard time to judge side
effects.

After a few seconds of confusion we need to check if this change is
libp11 or if we need to redirect this to openssl.

** Tags removed: server-todo

** Tags added: rls-nn-incoming

** Tags removed: rls-nn-incoming

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libp11 in Ubuntu.
https://bugs.launchpad.net/bugs/2119094

Title:
  Segmentation fault crash on Ubuntu 24.04 with osslsigncode

Status in libp11:
  Fix Released
Status in libp11 package in Ubuntu:
  Fix Released
Status in osslsigncode package in Ubuntu:
  Confirmed
Status in libp11 source package in Jammy:
  Fix Released
Status in libp11 source package in Noble:
  Triaged
Status in osslsigncode source package in Noble:
  Confirmed
Status in libp11 source package in Plucky:
  Fix Released
Status in libp11 source package in Questing:
  Fix Released

Bug description:
  osslsigncode is crashing for me when used with libengine-
  pkcs11-openssl on Ubuntu 24.04, e.g. with Google Cloud KMS PKCS#11
  provider:

  ```
  osslsigncode sign \
      -pkcs11engine /usr/lib/x86_64-linux-gnu/engines-3/pkcs11.so \
      -pkcs11module $PWD/libkmsp11-1.7-linux-amd64/libkmsp11.so \
      -certs cert.crt -key 'pkcs11:object=some-key' -h sha256 \
      -t http://timestamp.digicert.com \
      -in test.exe -out test-signed.exe
  ```

  I think this is the following issue and fix:
  * https://github.com/mtrojnar/osslsigncode/issues/388
  * https://github.com/OpenSC/libp11/pull/554

  Which should be considered for back porting or updating libp11 as this
  is a crash bug that prevents this usage of osslsigncode with no
  workaround.

To manage notifications about this bug go to:
https://bugs.launchpad.net/libp11/+bug/2119094/+subscriptions