Hi Bruce!
On Fr, 25 Okt 2024, Bruce Ferrell wrote:
The distribution package this distro seems to be failing for various of the
binaries; ghostlist.sh is failing with buffer overflow crashes.
Any suggestions on doing a correct build on this?
This is a known issue, which was discussed some weeks ago on this list
(sadly the list archive currently doesn't add new entries).
It's a bug in md5hash() in lib/digest.c, which is triggered in Ubuntu
24.04 (and newer), which compile with -D_FORTIFY_SOURCE=3.
As a workaround, you can compile xymon with -D_FORTIFY_SOURCE=2 or
as a solution you can apply the attached patch.
You will find more information about this issue in
https://bugs.launchpad.net/ubuntu/+source/xymon/+bug/2078638
There's also a reference to a PPA
https://launchpad.net/~waveform/+archive/ubuntu/xymon that has this
patch applied.
Hopefully Ubuntu will release patched versions of the package soon.
Greetings
Roland