crash due to incomplete AVX check

[Gregor Jasny]

Hello,

gnutls 3.7.3-4ubuntu1.1 does not properly check for AVX support. On VMs that disable AVX / XSAVE but still set the AVX cpuid capability processes that use gnutls are crashing with an illegal instruction error.

For details see:
https://gitlab.com/gnutls/gnutls/-/issues/1282#note_991427169

Attached you'll find the debdiff which adds
https://gitlab.com/gnutls/gnutls/-/commit/8ff391fa011e02c88b0d099061ca62e88ab68011

I locally built the package and verified that the error on my VM is gone. Please consider including this patch into jammy. Upstream acknowledged that this patch is sufficient to fix the bug:
https://gitlab.com/gnutls/gnutls/-/merge_requests/1631#note_1084762091

Thanks,
Gregor

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "avx.diff" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.]

[Simon Chopin (schopin)]

Hi!

I'd be happy to sponsor this as an SRU to Jammy as well as a patch against the current Kinetic release, but could you please follow the instructions at https://wiki.ubuntu.com/StableReleaseUpdates beforehand, in particular regarding the bug template?

Thanks :)

[Simon Chopin (schopin)]

I uploaded your patch to Kinetic. It will be blocked in the queue for a couple of days until we get the beta out, and then it's likely it will fail to build because of https://bugs.launchpad.net/ubuntu/+source/p11-kit/+bug/1991067

I'll retrigger the build once that other one is fixed in -proposed.

I took the liberty of amending your changelog entry to add a reference to this bug:

   * Fix Segmentation Fault due to misdetected Intel AVX support
     (LP: #1988398)

[Launchpad Janitor (janitor)]

This bug was fixed in the package gnutls28 - 3.7.7-2ubuntu2

---------------
gnutls28 (3.7.7-2ubuntu2) kinetic; urgency=medium

  * Fix Segmentation Fault due to misdetected Intel AVX support
    (LP: #1988398)

 -- Gregor Jasny <email address hidden> Thu, 01 Sep 2022 07:42:53 +0100

[Steve Langasek (vorlon)]

According to the comment history, this SRU is currently waiting for an SRU bug description.