[xml/sgml-pkgs] Bug#781232: Bug#766884: libxml2 broken in sid for months already

[Aron Xu]

Control: reopen 766884

Let's reopen #766884 for tracking, it's not really fixed, but just
avoided. Unfortunately #781232 is opened. I would like to block this
version to testing as it's not the proper way of fixing the problem
(but it is indeed the most straightforward way of avoiding it).

Maintenance status of libxml2 upstream is a little bit complicated
because the code base tend to have quite some issues that can easily
trigger new bugs, so that fix for one particular bug may lead to
another new one. Reverting to older version isn't a solution because I
believe not all of the memory related fixes can be ignored even for
the case of security, that's the reason why I tend to carry quite a
lot of patches for stable releases.

The proper way of working this bug around would be bisecting and
patching which is quite time consuming. I haven't yet managed to get
it done and help is welcomed, but if no one step up I'll do it
eventually (or cross finger for finding a proper fix, :D).


Thanks,
Aron


On Wed, Aug 26, 2015 at 5:52 AM, Raphael Hertzog <hertzog at debian.org> wrote:
> Hi,
>
> On Thu, 20 Aug 2015, Vincent Lefevre wrote:
>> I completely agree that libxml2 should be reverted to 2.9.1 (I have
>> never used 2.9.2 due to this bug).
>
> I just did this.
>
>> And IMHO, the new package should probably break libxml-libxml-perl
>> 2.0116+dfsg-4 due to an annoying and useless test of the versions
>> in the Perl module (bug 783610). So, libxml-libxml-perl should be
>> rebuilt against libxml2 2.9.1, which would make bug 783610 no longer
>> appear in most cases.
>
> But not this. We should just ask for bin-NMU of libxml-libxml-perl once
> the new libxml2 is built. Can you take care of this?
>
> https://wiki.debian.org/binNMU
>
> (You can do it immediately if you combine it with appropriate dep-wait)
>
> Cheers,
> --
> Raphaël Hertzog ◈ Debian Developer
>
> Support Debian LTS: http://www.freexian.com/services/debian-lts.html
> Learn to master Debian: http://debian-handbook.info/get/
>