Your message dated Sat, 16 Aug 2025 06:20:43 +0000
with message-id <[email protected]>
and subject line Bug#1007914: fixed in libfile-keepass-perl 2.03-2
has caused the Debian Bug report #1007914,
regarding libfile-keepass-perl: crashes "not well-formed (invalid token)" when
finding escape characters
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1007914: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1007914
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: kpcli
Version: 3.1-3.1
Severity: grave
Tags: upstream
Justification: causes serious data loss
Dear Maintainer,
I store my passwords in a keepass file that I exclusively use through kpcli.
After the last kernel upgrade reboot I was unable to open the file anymore, and
thus can't access my passwords. I have an aged backup, and most sites offer
password resets, but this is actually a serious data loss.
When I try to open the database now I get the following error message:
➤ kpcli --kdb rhonda.kdbx
Please provide the master password: *************************
Couldn't load the file rhonda.kdbx:
not well-formed (invalid token) at line 3103, column 15, byte 100409 at
/usr/lib/x86_64-linux-gnu/perl5/5.34/XML/Parser.pm line 187.
So I have somehow the hope that the data isn't lost completely, only that the
XML parser is stumbling upon something. I haven't had the nerve yet to dig
further into it and try to unpack the whole situation, make kpcli dump what it
gives to XML::Parser, that part gives me a bit of a hope because it clearly can
decrypt the file in the first place, but it makes it unusable to the
"innocent".
If you are able to give me any helping hand on those grounds, they would be
very much appreciated! Because as it stands I assume this might happen to
others, and I'm uncertain if it would have anything to do with specific data
stored in some comment or password field or whatever.
Thanks in advance,
Rhonda
-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.16.0-3-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=de_AT.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8),
LANGUAGE=de_AT:de
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages kpcli depends on:
ii libclone-perl 0.45-1+b2
ii libcrypt-rijndael-perl 1.16-1+b1
ii libfile-keepass-perl 2.03-1.1
ii libsort-naturally-perl 1.03-2
ii libterm-readkey-perl 2.38-1+b3
ii libterm-readline-gnu-perl 1.42-2+b1
ii libterm-shellui-perl 0.92-4
ii perl 5.34.0-3
Versions of packages kpcli recommends:
ii libcapture-tiny-perl 0.48-1
ii libclipboard-perl 0.27-1
pn libdata-password-perl <none>
pn libmath-random-isaac-perl <none>
kpcli suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: libfile-keepass-perl
Source-Version: 2.03-2
Done: Andreas Tille <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libfile-keepass-perl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Tille <[email protected]> (supplier of updated libfile-keepass-perl
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 16 Aug 2025 07:54:35 +0200
Source: libfile-keepass-perl
Architecture: source
Version: 2.03-2
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <[email protected]>
Changed-By: Andreas Tille <[email protected]>
Closes: 1007914
Changes:
libfile-keepass-perl (2.03-2) unstable; urgency=low
.
[ Salvatore Bonaccorso ]
* Change search.cpan.org based URIs to metacpan.org based URIs
* Update Vcs-* headers for switch to salsa.debian.org
.
[ gregor herrmann ]
* Strip trailing slash from metacpan URLs.
* debian/copyright: change Copyright-Format 1.0 URL to HTTPS.
* debian/watch: use uscan version 4.
.
[ Alex Muntada ]
* Remove inactive pkg-perl members from Uploaders.
.
[ Debian Janitor ]
* Bump debhelper from deprecated 8 to 13.
* Set debhelper-compat version in Build-Depends.
.
[ Andreas Tille ]
* Standards-Version: 4.7.2 (routine-update)
* Add myself to Uploaders
.
[ Damyan Ivanov ]
* Fix replacement of control characters
Closes: #1007914
Checksums-Sha1:
18f3ea44766985bf51d018ccb2ac1afe8af5f90a 2192 libfile-keepass-perl_2.03-2.dsc
091b876a6b6e6e940b1789757e926de2bea90607 2228
libfile-keepass-perl_2.03-2.debian.tar.xz
0a64e0aa237bc5476d3e313d2e79360bbd4278c4 6798
libfile-keepass-perl_2.03-2_amd64.buildinfo
Checksums-Sha256:
bdc5ca5564bd5ad871b57226edf3fa48d66dbe638d38ff7eeb031bab29ad411f 2192
libfile-keepass-perl_2.03-2.dsc
18444a361b4335a641542abcebbeab38071ccafa41e6dfb28bd498f363edf438 2228
libfile-keepass-perl_2.03-2.debian.tar.xz
a267673d3b00a1cccec24840751f7adaccbd6c4aa5671aeea5c67a887092ada9 6798
libfile-keepass-perl_2.03-2_amd64.buildinfo
Files:
5af9ed4e1c7e0989693005a9f378feb3 2192 perl optional
libfile-keepass-perl_2.03-2.dsc
8b6a78bcaf524bd217d3439b5779b3d9 2228 perl optional
libfile-keepass-perl_2.03-2.debian.tar.xz
23ce1b9e3392f9227d0f64ca66f29e3e 6798 perl optional
libfile-keepass-perl_2.03-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=EmJK
-----END PGP SIGNATURE-----
pgpOLqNj01Lgd.pgp
Description: PGP signature
--- End Message ---
