Package: libcoin80v5
Version: 3.1.4~abc9f50+dfsg1-2
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,

Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
copy of it in libcoin results in segfaults of any program that uses libexpat1. 
Specifically any program that uses xml from python and links against libcoin 
will segfault.

The stacktrace looks like it is a problem with libexpat1 leading to a segfault 
in XML_SetHashSalt - however looking at that function there is no way it could 
possibly segfault - unless of course the provided XMLParser pointer does not 
actually point to what expat expects to be an XMLParser - which is indeed the 
case because the XMLParser instance was created by a call into lobcoin which is 
still on libexpat 2.2.0.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (750, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcoin80v5 depends on:
ii  libc6                     2.24-17
ii  libgcc1                   1:7.2.0-3
ii  libgl1-mesa-glx [libgl1]  13.0.6-1+b2
ii  libice6                   2:1.0.9-2
ii  libsm6                    2:1.2.2-1+b3
ii  libstdc++6                7.2.0-3
ii  libx11-6                  2:1.6.4-3
ii  libxext6                  2:1.3.3-1+b2

libcoin80v5 recommends no packages.

Versions of packages libcoin80v5 suggests:
ii  libbz2-1.0     1.0.6-8.1
ii  libfreetype6   2.8-0.2
pn  libopenal0a    <none>
ii  libsimage-dev  1.7.1~2c958a6.dfsg-4
ii  zlib1g         1:1.2.8.dfsg-5

-- no debconf information

Reply via email to