Package: libpython2.7-stdlib Version: 2.7.13-4 Severity: normal Tags: patch
Dear Maintainer, There is a bug in the XML_SetHashSalt function, which causes Segfaults when using for example FreeCAD, as seen here: https://forum.freecadweb.org/viewtopic.php?f=15&t=23380 This bug occours with libexpat1 >= 2.2.1. A possible workaround is, to downgrade to 2.2.0. There is already a merged patch for this in python: https://bugs.python.org/issue29682 Judging from the date of the python version in /usr/share/doc/libpython2.7-minimal/changelog.Debian.gz, this patch should be already included in Debian (the changelog says: "Update to 20170719 from the 2.7 branch.", and the patch was merged on 20170309). But it isn't. The version of Modules/pyexpat.c is from 2014. Is there a specific reason, that this patch was not included? thanks in advance! regards sebastian -- System Information: Debian Release: buster/sid APT prefers stable APT policy: (991, 'stable'), (990, 'unstable'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.11.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=de_AT.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8), LANGUAGE=de_AT.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libpython2.7-stdlib:amd64 depends on: ii libbz2-1.0 1.0.6-8.1 ii libc6 2.24-14 ii libdb5.3 5.3.28-13 ii libexpat1 2.2.3-1 ii libffi6 3.2.1-6 ii libncursesw5 6.0+20170715-2 ii libpython2.7-minimal 2.7.13-4 ii libreadline7 7.0-3 ii libsqlite3-0 3.19.3-3 ii libssl1.1 1.1.0f-4 ii libtinfo5 6.0+20170715-2 ii mime-support 3.60 libpython2.7-stdlib:amd64 recommends no packages. libpython2.7-stdlib:amd64 suggests no packages. -- no debconf information
