From nobody@FreeBSD.org  Sat Oct  2 13:34:49 2010
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 89581106564A
	for <freebsd-gnats-submit@FreeBSD.org>; Sat,  2 Oct 2010 13:34:49 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 782E58FC08
	for <freebsd-gnats-submit@FreeBSD.org>; Sat,  2 Oct 2010 13:34:49 +0000 (UTC)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id o92DYm3E027851
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 2 Oct 2010 13:34:48 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id o92DYmiB027827;
	Sat, 2 Oct 2010 13:34:48 GMT
	(envelope-from nobody)
Message-Id: <201010021334.o92DYmiB027827@www.freebsd.org>
Date: Sat, 2 Oct 2010 13:34:48 GMT
From: Pascal Stumpf <Pascal.Stumpf@cubes.de>
To: freebsd-gnats-submit@FreeBSD.org
Subject: audio/amarok-kde4 crashes on network activity if ports openssl is installed
X-Send-Pr-Version: www-3.1
X-GNATS-Notify: datahead4@gmail.com

>Number:         151154
>Category:       ports
>Synopsis:       audio/amarok-kde4 crashes on network activity if ports openssl is installed
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kde
>State:          feedback
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Oct 02 13:40:02 UTC 2010
>Closed-Date:    
>Last-Modified:  Mon Aug 20 15:00:29 UTC 2012
>Originator:     Pascal Stumpf
>Release:        8-STABLE
>Organization:
>Environment:
>Description:
security/tor requires to have OpenSSL installed from ports due to renegotiation being disabled in base OpenSSL in some supported FreeBSD releases (not sure which ones, but I think 8.1 has it re-enabled). Unfortunately, this can lead to ugly and unexpected bugs in ports that link against OpenSSL libraries. As it was exposed by Amarok (https://bugs.kde.org/show_bug.cgi?id=252912), KIO libraries may run into problems when calling functions from different versions of these libraries, crashing the application. Note that this is not confined to Amarok, but may affect any other application relying on KIO and QtSsl.
>How-To-Repeat:
Install security/openssl and audio/amarok-kde4, start amarok, enable lyrics plugin, cover fetching etc., play a file and watch it crash.
>Fix:
The best solution to this would be to re-enable renegotiation in OpenSSL in all supported releases. Disabling it in the first place was more a workaround than a real security fix anyway. Then one could safely remove the dependency of security/tor on ports OpenSSL.

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: edwin 
State-Changed-When: Sat Oct 2 13:40:08 UTC 2010 
State-Changed-Why:  
Awaiting maintainers feedback (via the GNATS Auto Assign Tool) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=151154 

From: Edwin Groothuis <edwin@FreeBSD.org>
To: datahead4@gmail.com
Cc: bug-followup@FreeBSD.org
Subject: Re: ports/151154: audio/amarok-kde4 crashes on network activity if ports openssl is installed
Date: Sat, 2 Oct 2010 13:40:06 UT

 Maintainer of audio/amarok-kde4,
 
 Please note that PR ports/151154 has just been submitted.
 
 If it contains a patch for an upgrade, an enhancement or a bug fix
 you agree on, reply to this email stating that you approve the patch
 and a committer will take care of it.
 
 The full text of the PR can be found at:
     http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/151154
 
 -- 
 Edwin Groothuis via the GNATS Auto Assign Tool
 edwin@FreeBSD.org
Responsible-Changed-From-To: freebsd-ports-bugs->kde 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Sun Feb 13 01:51:36 UTC 2011 
Responsible-Changed-Why:  
Over to new maintainer. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=151154 
State-Changed-From-To: feedback->open 
State-Changed-By: eadler 
State-Changed-When: Sat Sep 24 18:10:55 UTC 2011 
State-Changed-Why:  
feedback timeout 

http://www.freebsd.org/cgi/query-pr.cgi?pr=151154 
State-Changed-From-To: open->analyzed 
State-Changed-By: avilla 
State-Changed-When: Thu Aug 16 22:51:03 UTC 2012 
State-Changed-Why:  
The issue was analysed by avg@ - 
http://mail.kde.org/pipermail/kde-freebsd/2012-February/012478.html - 
and a solution will be evaluated - 
http://mail.kde.org/pipermail/kde-freebsd/2012-August/013842.html 

http://www.freebsd.org/cgi/query-pr.cgi?pr=151154 
State-Changed-From-To: analyzed->feedback 
State-Changed-By: avilla 
State-Changed-When: Mon Aug 20 15:00:25 UTC 2012 
State-Changed-Why:  
The problem should have been fixed in r292033, can you test again? 

http://www.freebsd.org/cgi/query-pr.cgi?pr=151154 
>Unformatted:
