openssl upgrade makes sasl unusable

[Szabolcs Parragh]

In Ubuntu 6.06 (Dapper) a new upgrade has been released that upgrades the openssl package and the corresponding libssl0.9.8 library:

Preparing to replace libssl0.9.8 0.9.8a-7ubuntu0.7 (using .../libssl0.9.8_0.9.8a-7ubuntu0.9_amd64.deb) ...
Unpacking replacement libssl0.9.8 ...
Preparing to replace openssl 0.9.8a-7ubuntu0.7 (using .../openssl_0.9.8a-7ubuntu0.9_amd64.deb) ...
Unpacking replacement openssl ...

This upgrade makes the SASL authentication (for postfix) unusable, and so a whole postfix SMTP installation using that. That is a VERY serious problem. (Downgrading the two packages can be a temporary fix.)

The following "auth.log" segment shows the details of the problem:

Jun 30 12:49:28 mester saslauthd[22542]: PAM unable to dlopen(/lib/security/pam_pgsql.so)
Jun 30 12:49:28 mester saslauthd[22542]: PAM [dlerror: /usr/lib/libssl.so.0.9.8: symbol pqueue_size, version OPENSSL_0.9.8 not defined in file libcrypto.so.0.9.8 with link time reference]
Jun 30 12:49:28 mester saslauthd[22542]: PAM adding faulty module: /lib/security/pam_pgsql.so
Jun 30 12:49:28 mester saslauthd[22542]: DEBUG: auth_pam: pam_authenticate failed: Module is unknown
Jun 30 12:49:28 mester saslauthd[22542]: do_auth : auth failure: [user=************] [service=smtp] [realm=nir.hu] [mech=pam] [reason=PAM auth error]

[Szabolcs Parragh (parszab)]

Noone? Seriously: is this not a real enough issue? Or am I doing something wrong to see this happen?

[dino99 (9d9)]

outdated report & no more maintained distro; please send a new one if that issue still exist (using ubuntu-bug)