Your message dated Thu, 21 Dec 2017 12:19:14 +0000
with message-id <e1erzog-00074d...@fasolo.debian.org>
and subject line Bug#874727: fixed in coin3 3.1.4~abc9f50+dfsg2-1
has caused the Debian Bug report #874727,
regarding libcoin80v5: Program using libcoin80v5 and any other library that 
uses lebexpat1 segfaults.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
874727: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874727
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libcoin80v5
Version: 3.1.4~abc9f50+dfsg1-2
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,

Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
copy of it in libcoin results in segfaults of any program that uses libexpat1. 
Specifically any program that uses xml from python and links against libcoin 
will segfault.

The stacktrace looks like it is a problem with libexpat1 leading to a segfault 
in XML_SetHashSalt - however looking at that function there is no way it could 
possibly segfault - unless of course the provided XMLParser pointer does not 
actually point to what expat expects to be an XMLParser - which is indeed the 
case because the XMLParser instance was created by a call into lobcoin which is 
still on libexpat 2.2.0.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (750, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcoin80v5 depends on:
ii  libc6                     2.24-17
ii  libgcc1                   1:7.2.0-3
ii  libgl1-mesa-glx [libgl1]  13.0.6-1+b2
ii  libice6                   2:1.0.9-2
ii  libsm6                    2:1.2.2-1+b3
ii  libstdc++6                7.2.0-3
ii  libx11-6                  2:1.6.4-3
ii  libxext6                  2:1.3.3-1+b2

libcoin80v5 recommends no packages.

Versions of packages libcoin80v5 suggests:
ii  libbz2-1.0     1.0.6-8.1
ii  libfreetype6   2.8-0.2
pn  libopenal0a    <none>
ii  libsimage-dev  1.7.1~2c958a6.dfsg-4
ii  zlib1g         1:1.2.8.dfsg-5

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: coin3
Source-Version: 3.1.4~abc9f50+dfsg2-1

We believe that the bug you reported is fixed in the latest version of
coin3, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 874...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Anton Gladky <gl...@debian.org> (supplier of updated coin3 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 Dec 2017 21:45:35 +0100
Source: coin3
Binary: libcoin80v5 libcoin80-dev libcoin80-doc libcoin80-runtime
Architecture: source
Version: 3.1.4~abc9f50+dfsg2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Team 
<debian-science-maintain...@lists.alioth.debian.org>
Changed-By: Anton Gladky <gl...@debian.org>
Description:
 libcoin80-dev - high-level 3D graphics devkit with Open Inventor and VRML97 
suppo
 libcoin80-doc - high-level 3D graphics kit with Open Inventor and VRML97 
support
 libcoin80-runtime - high-level 3D graphics kit - external data files
 libcoin80v5 - high-level 3D graphics kit implementing the Open Inventor API
Closes: 874727
Changes:
 coin3 (3.1.4~abc9f50+dfsg2-1) unstable; urgency=medium
 .
   * Team upload.
   * [e1dfea6] Remove an embedded version of expat. (Closes: #874727)
   * [6fa83c5] Use compat level 10
   * [abf1040] Ignore files src/xml/expat in d/copyright
   * [7c4d8f0] New upstream version 3.1.4~abc9f50+dfsg2
   * [d61c626] Apply cme fix dpkg
   * [9d48f66] Remove myself from uploaders
Checksums-Sha1:
 f3cc30c032442abe116d19b6b3bcc10552233f1d 2405 coin3_3.1.4~abc9f50+dfsg2-1.dsc
 d8b5094a2d86de0a51427e327c513043ee21ca7e 3132708 
coin3_3.1.4~abc9f50+dfsg2.orig.tar.xz
 5a88e12d4e27e78110fa2d344a64e2335b907e96 15104 
coin3_3.1.4~abc9f50+dfsg2-1.debian.tar.xz
 37415cbfe14dc691769442aeb15ece79311788d0 14210 
coin3_3.1.4~abc9f50+dfsg2-1_source.buildinfo
Checksums-Sha256:
 6aab465e168ff4315aeee2dfec864d6c253f8b476fe83e7b225d220db9f1243f 2405 
coin3_3.1.4~abc9f50+dfsg2-1.dsc
 6fe357da76120e8deba3601a9df4c8e3186f9a033798a891425d95343f81182a 3132708 
coin3_3.1.4~abc9f50+dfsg2.orig.tar.xz
 ae2a5c6585d61e0e7f32c429f8a37c172ab29a2b0094de6bbe91a0ff3c472298 15104 
coin3_3.1.4~abc9f50+dfsg2-1.debian.tar.xz
 660afddbe24c38b7137ff7b1672178883261288dd40619931f44102f898214be 14210 
coin3_3.1.4~abc9f50+dfsg2-1_source.buildinfo
Files:
 d6c443ad07a0b71787a5e9fca5aadd6e 2405 graphics optional 
coin3_3.1.4~abc9f50+dfsg2-1.dsc
 ca92238253cfdd6cfe9cb145e9994511 3132708 graphics optional 
coin3_3.1.4~abc9f50+dfsg2.orig.tar.xz
 aa0c4148f12f2f41098b91f54e781b6a 15104 graphics optional 
coin3_3.1.4~abc9f50+dfsg2-1.debian.tar.xz
 47dffe4c48c844feb680061d927cbdfb 14210 graphics optional 
coin3_3.1.4~abc9f50+dfsg2-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEu71F6oGKuG/2fnKF0+Fzg8+n/wYFAlo6zCsACgkQ0+Fzg8+n
/wY5CA//S0p3dWbvOKjOK1swv6q8MjdLPvJsa8w0J39KNAREPrm5NkJnck/TF7zp
B1hO1lfTvfKMqN++S+xkKB8XAYTTjQ/uLXGk8IHXduemXc0Wc0fVs96eUyp3q/PJ
mYyunF5MZcgHV22huMmkTsgI0WQwjsfIu8zKkCrNIaTFmaReS/Qxc0z9PtWWPHA1
j9EQLxNKzOcBqswBDJiORO/K8HaBLlDV/3rUh1qmq1NYQJcdSpIfgj/4xpCI3Bv8
9VtpoTuIERZDUMBwxl4yYbbTBcnYMt1WPhxztdO4EUO8eov9SSGHhqethajjVpso
/CN6XIYM8XJRjZxtiRBcsmbr83Pjgn0QQDVh1SwgZsRk9oaIBdo4u2xk3MUYD5Or
Bvyg9id2f5SZkKKkkgWFaHqxoU6FY+J+zjlBUvGmMlI4y1SpzwXUo7NqEykBz1MH
RKHPv7oXNaf+/GF6VRPXCAtL58fbg3gHTpA8uBrz4e0Ml07MnmFg07XWC57PZ732
UqTQwBS47MOm0vxiMUqs43A6wkMjl9nrYb7L10S83rHpJqhf57aPGV9IzYblztnl
mfEbsObtxxPot89MIUY+t7eZBZor08ykf0RQcNFpgDQRAGvvU7jZRCaTBicyVWNU
he8VAUiv0l0kb6c5gNpQLxElkequVSxTwWcGLE2xMVYemBS+0wk=
=NUcF
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to