Hi Bruce!
On Fr, 25 Okt 2024, Bruce Ferrell wrote:
The distribution package this distro seems to be failing for various of the binaries; ghostlist.sh is failing with buffer overflow crashes.
Any suggestions on doing a correct build on this?
This is a known issue, which was discussed some weeks ago on this list (sadly the list archive currently doesn't add new entries).
It's a bug in md5hash() in lib/digest.c, which is triggered in Ubuntu 24.04 (and newer), which compile with -D_FORTIFY_SOURCE=3.
As a workaround, you can compile xymon with -D_FORTIFY_SOURCE=2 or as a solution you can apply the attached patch.
You will find more information about this issue in https://bugs.launchpad.net/ubuntu/+source/xymon/+bug/2078638 There's also a reference to a PPA https://launchpad.net/~waveform/+archive/ubuntu/xymon that has this patch applied.
Hopefully Ubuntu will release patched versions of the package soon.
Greetings Roland