A flaw was found in pesign. The cms_set_pw_data function didn't handle the NULL pwdata invocation from daemon.c. This leads to a explicit NULL dereference and crash on all attempts to daemonize pesign. Introducing commit: https://github.com/frozencemetery/pesign/commit/12f16710ee44ef64ddb044a3523c3c4c4d90039a Upstream fix: https://github.com/rhboot/pesign/pull/79
Created pesign tracking bugs for this issue: Affects: fedora-all [bug 2065772]