xymon package for Ubuntu 24.04.1 LTS 🔗 link

The distribution package this distro seems to be failing for various of 
the binaries; ghostlist.sh is failing with buffer overflow crashes.


Any suggestions on doing a correct build on this?

Hi Bruce!

On Fr, 25 Okt 2024, Bruce Ferrell wrote:

This is a known issue, which was discussed some weeks ago on this list
(sadly the list archive currently doesn't add new entries).

It's a bug in md5hash() in lib/digest.c, which is triggered in Ubuntu
24.04 (and newer), which compile with -D_FORTIFY_SOURCE=3.

As a workaround, you can compile xymon with -D_FORTIFY_SOURCE=2 or
as a solution you can apply the attached patch.

You will find more information about this issue in
https://bugs.launchpad.net/ubuntu/+source/xymon/+bug/2078638
There's also a reference to a PPA
https://launchpad.net/~waveform/+archive/ubuntu/xymon that has this
patch applied.

Hopefully Ubuntu will release patched versions of the package soon.

Greetings
Roland

On 10/25/24 11:47 AM, Roland Rosenfeld wrote:

Hi Bruce!

On Fr, 25 Okt 2024, Bruce Ferrell wrote:

The distribution package this distro seems to be failing for various of the
binaries; ghostlist.sh is failing with buffer overflow crashes.

Any suggestions on doing a correct build on this?

This is a known issue, which was discussed some weeks ago on this list
(sadly the list archive currently doesn't add new entries).

It's a bug in md5hash() in lib/digest.c, which is triggered in Ubuntu
24.04 (and newer), which compile with -D_FORTIFY_SOURCE=3.

As a workaround, you can compile xymon with -D_FORTIFY_SOURCE=2 or
as a solution you can apply the attached patch.

You will find more information about this issue in
https://bugs.launchpad.net/ubuntu/+source/xymon/+bug/2078638
There's also a reference to a PPA
https://launchpad.net/~waveform/+archive/ubuntu/xymon that has this
patch applied.

Hopefully Ubuntu will release patched versions of the package soon.

Greetings
Roland

Thanks Roland!