Bug#874727: marked as done (libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.)

2019-01-11 Thread Debian Bug Tracking System 
Your message dated Fri, 11 Jan 2019 23:00:04 -0600
with message-id 
and subject line 
has caused the Debian Bug report #874727,
regarding libcoin80v5: Program using libcoin80v5 and any other library that 
uses lebexpat1 segfaults.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
874727: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874727
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libcoin80v5
Version: 3.1.4~abc9f50+dfsg1-2
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,

Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
copy of it in libcoin results in segfaults of any program that uses libexpat1. 
Specifically any program that uses xml from python and links against libcoin 
will segfault.

The stacktrace looks like it is a problem with libexpat1 leading to a segfault 
in XML_SetHashSalt - however looking at that function there is no way it could 
possibly segfault - unless of course the provided XMLParser pointer does not 
actually point to what expat expects to be an XMLParser - which is indeed the 
case because the XMLParser instance was created by a call into lobcoin which is 
still on libexpat 2.2.0.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (750, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcoin80v5 depends on:
ii  libc6 2.24-17
ii  libgcc1   1:7.2.0-3
ii  libgl1-mesa-glx [libgl1]  13.0.6-1+b2
ii  libice6   2:1.0.9-2
ii  libsm62:1.2.2-1+b3
ii  libstdc++67.2.0-3
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2

libcoin80v5 recommends no packages.

Versions of packages libcoin80v5 suggests:
ii  libbz2-1.0 1.0.6-8.1
ii  libfreetype6   2.8-0.2
pn  libopenal0a
ii  libsimage-dev  1.7.1~2c958a6.dfsg-4
ii  zlib1g 1:1.2.8.dfsg-5

-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 4.0.0~CMake~6f54f1602475+ds1-1--- End Message ---

Bug#874727: marked as done (libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.)

2018-12-27 Thread Debian Bug Tracking System 
Your message dated Thu, 27 Dec 2018 17:20:43 +0100
with message-id <143377b1-70db-3ddd-2321-96fe1e98a...@alaxarxa.net>
and subject line Embed expat is not used
has caused the Debian Bug report #874727,
regarding libcoin80v5: Program using libcoin80v5 and any other library that 
uses lebexpat1 segfaults.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
874727: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874727
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libcoin80v5
Version: 3.1.4~abc9f50+dfsg1-2
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,

Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
copy of it in libcoin results in segfaults of any program that uses libexpat1. 
Specifically any program that uses xml from python and links against libcoin 
will segfault.

The stacktrace looks like it is a problem with libexpat1 leading to a segfault 
in XML_SetHashSalt - however looking at that function there is no way it could 
possibly segfault - unless of course the provided XMLParser pointer does not 
actually point to what expat expects to be an XMLParser - which is indeed the 
case because the XMLParser instance was created by a call into lobcoin which is 
still on libexpat 2.2.0.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (750, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcoin80v5 depends on:
ii  libc6 2.24-17
ii  libgcc1   1:7.2.0-3
ii  libgl1-mesa-glx [libgl1]  13.0.6-1+b2
ii  libice6   2:1.0.9-2
ii  libsm62:1.2.2-1+b3
ii  libstdc++67.2.0-3
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2

libcoin80v5 recommends no packages.

Versions of packages libcoin80v5 suggests:
ii  libbz2-1.0 1.0.6-8.1
ii  libfreetype6   2.8-0.2
pn  libopenal0a
ii  libsimage-dev  1.7.1~2c958a6.dfsg-4
ii  zlib1g 1:1.2.8.dfsg-5

-- no debconf information
--- End Message ---
--- Begin Message ---
Since version 4.0.0~CMake~6f54f1602475+ds1-1~exp1 coin3 is not used the embed
version of expat and used the system one.





signature.asc
Description: OpenPGP digital signature
--- End Message ---

Bug#874727: marked as done (libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.)

2017-12-21 Thread Debian Bug Tracking System 
Your message dated Thu, 21 Dec 2017 12:19:14 +
with message-id 
and subject line Bug#874727: fixed in coin3 3.1.4~abc9f50+dfsg2-1
has caused the Debian Bug report #874727,
regarding libcoin80v5: Program using libcoin80v5 and any other library that 
uses lebexpat1 segfaults.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
874727: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874727
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libcoin80v5
Version: 3.1.4~abc9f50+dfsg1-2
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,

Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
copy of it in libcoin results in segfaults of any program that uses libexpat1. 
Specifically any program that uses xml from python and links against libcoin 
will segfault.

The stacktrace looks like it is a problem with libexpat1 leading to a segfault 
in XML_SetHashSalt - however looking at that function there is no way it could 
possibly segfault - unless of course the provided XMLParser pointer does not 
actually point to what expat expects to be an XMLParser - which is indeed the 
case because the XMLParser instance was created by a call into lobcoin which is 
still on libexpat 2.2.0.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (750, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcoin80v5 depends on:
ii  libc6 2.24-17
ii  libgcc1   1:7.2.0-3
ii  libgl1-mesa-glx [libgl1]  13.0.6-1+b2
ii  libice6   2:1.0.9-2
ii  libsm62:1.2.2-1+b3
ii  libstdc++67.2.0-3
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2

libcoin80v5 recommends no packages.

Versions of packages libcoin80v5 suggests:
ii  libbz2-1.0 1.0.6-8.1
ii  libfreetype6   2.8-0.2
pn  libopenal0a
ii  libsimage-dev  1.7.1~2c958a6.dfsg-4
ii  zlib1g 1:1.2.8.dfsg-5

-- no debconf information
--- End Message ---
--- Begin Message ---
Source: coin3
Source-Version: 3.1.4~abc9f50+dfsg2-1

We believe that the bug you reported is fixed in the latest version of
coin3, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 874...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Anton Gladky  (supplier of updated coin3 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Wed, 20 Dec 2017 21:45:35 +0100
Source: coin3
Binary: libcoin80v5 libcoin80-dev libcoin80-doc libcoin80-runtime
Architecture: source
Version: 3.1.4~abc9f50+dfsg2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Team 

Changed-By: Anton Gladky 
Description:
 libcoin80-dev - high-level 3D graphics devkit with Open Inventor and VRML97 
suppo
 libcoin80-doc - high-level 3D graphics kit with Open Inventor and VRML97 
support
 libcoin80-runtime - high-level 3D graphics kit - external data files
 libcoin80v5 - high-level 3D graphics kit implementing the Open Inventor API
Closes: 874727
Changes:
 coin3 (3.1.4~abc9f50+dfsg2-1) unstable; urgency=medium
 .
   * Team upload.
   * [e1dfea6] Remove an embedded version of expat. (Closes: #874727)
   * [6fa83c5] Use compat level 10
   * [abf1040] Ignore files src/xml/expat in d/copyright
   * [7c4d8f0] New upstream version 3.1.4~abc9f50+dfsg2
   * [d61c626] Apply cme fix dpkg
   * [9d48f66] Remove myself from uploaders
Checksums-Sha1:
 f3cc30c032442abe116d19b6b3bcc10552233f1d 2405 coin3_3.1.4~abc9f50+dfsg2-1.dsc
 d8b5094a2d86de0a51427e327c513043ee21ca7e 3132708 
coin3_3.1.4~abc9f50+dfsg2.orig.tar.xz
 5a88e12d4e27e78110fa2d344a64e2335b907e96 15104 
coin3_3.1.4~abc9f50+dfsg2-1.debian.tar.xz
 37415cbfe14dc691769442aeb15ece79311788d0 14210