Your message dated Sun, 20 Feb 2022 16:34:02 +0000
with message-id <e1nlp9u-0005lc...@fasolo.debian.org>
and subject line Bug#1006162: fixed in expat 2.4.5-2
has caused the Debian Bug report #1006162,
regarding expat: autopkgtest regressions (from CVE-2022-25313 fix)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1006162: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006162
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: expat
Version: 2.4.5-1
Severity: serious
Justification: autopkgtest regression
X-Debbugs-Cc: car...@debian.org
Control: affects -1
src:libxml-parser-perl,src:python2.7,src:python3.10,src;python3.9
Hi Laszlo,
There appears to be regressions from the CVE-2022-25313 fix in 2.4.5.
They are known already upstream, cf.
https://github.com/NixOS/nixpkgs/pull/160826#issuecomment-1046074523
I will hold of the planned expat security release until this is
addressed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: expat
Source-Version: 2.4.5-2
Done: Laszlo Boszormenyi (GCS) <g...@debian.org>
We believe that the bug you reported is fixed in the latest version of
expat, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1006...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <g...@debian.org> (supplier of updated expat package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 20 Feb 2022 16:26:07 +0100
Source: expat
Architecture: source
Version: 2.4.5-2
Distribution: unstable
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) <g...@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <g...@debian.org>
Closes: 1006162
Changes:
expat (2.4.5-2) unstable; urgency=medium
.
* Fix build_model regression (closes: #1006162).
Checksums-Sha1:
750a1460795f60e88e4c9c08c2760b6d11cc69f2 1981 expat_2.4.5-2.dsc
1bc9af10956db09870b1e959ecbede46d90af75b 16304 expat_2.4.5-2.debian.tar.xz
Checksums-Sha256:
293a8909ba4fd7d55c23eef0e58193153632afde236ee804f7473175a33bcafb 1981
expat_2.4.5-2.dsc
1eb50e66fe814e7950e8d55214ac4373cb2caeac5ea3a983ab2fc1b2aa03c84b 16304
expat_2.4.5-2.debian.tar.xz
Files:
b0238efdc100a7c4dd30c317c83b3769 1981 text optional expat_2.4.5-2.dsc
83ba4e45bcdd3ec8554d7eac6cdc222f 16304 text optional
expat_2.4.5-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=pZbQ
-----END PGP SIGNATURE-----
--- End Message ---