Re: svn client crash using DIGEST-MD5

Quanah Gibson-Mount <[email protected]> Mon, 09 Jan 2023 08:57:16 -0800

Newsgroups	gmane.comp.security.cyrus.sasl
Message-ID	<982372827219F3D414E414F7@[192.168.1.14]>


--On Wednesday, January 4, 2023 8:14 AM -0700 Chris Hardekopf via SASL=20
<[email protected]> wrote:

>
>
> The big difference that I notice looking at the alpine packages is that
> in 3.17 (crashes) cyrus-sasl-digestmd5 depends on "libcrypto3" and in
> 3.16 (works) cyrus-sasl-digestmd5 depends on "libcrypto1.1"
>
>
> https://pkgs.alpinelinux.org/package/v3.17/main/x86_64/cyrus-sasl-digestm
> d5
> https://pkgs.alpinelinux.org/package/v3.16/main/x86_64/cyrus-sasl-digestm
> d5


Sounds like they compiled it against OpenSSL 3, when that work is not yet=20
completed.  I'd file a bug with Alpine linux.

--Quanah



------------------------------------------
Cyrus: SASL
Permalink: https://cyrus.topicbox.com/groups/sasl/Tc1bb8688f156d835-Md94ca2=
76d7f70f39d310698a
Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription