#1125771 opgpcard: lxml error at svg creation

Package:
opgpcard
Source:
opgpcard
Submitter:
Pieter Lenaerts
Date:
2026-03-10 17:35:02 UTC
Severity:
normal
#1125771#5
Date:
2026-01-17 07:01:09 UTC
From:
To:
Dear Maintainer,

Running opgpcard on unstable and testing leads to the attached lxml error.

I've reported the issue upstream and proposed a patch:
- https://github.com/juga0/opgpcard/issues/5
- https://github.com/juga0/opgpcard/pull/6

I believe the Debian package can fix this temporarily as the patch is trivial.

Also, opgpcard could use autopkgtests to prevent a breakage like this from
happening.

I'm willing to help implement these. Please let me know what you think.

Br,

Pieter
#1125771#10
Date:
2026-02-01 19:45:27 UTC
From:
To:
I just tested in a trixie system and this issue is also present in stable. This package is unusable and should be fixed.
#1125771#15
Date:
2026-02-02 19:00:39 UTC
From:
To:
Control: tags -1 +patch

Refer to
https://github.com/juga0/opgpcard/pull/6/changes/2cf51ff1913a5ec6b50449de16f78f227561e80c
for an applicable patch to fix this asap in Debian.
#1125771#22
Date:
2026-03-08 09:27:51 UTC
From:
To:
Dear maintainer,

I have tried to contact you through this bug on January 17th and through
a separate email on February 24th, which I'm attaching for reference.

I have prepared an NMU in a fork on Salsa, from which I've prepared a
merge request: https://salsa.debian.org/debian/opgpcard/-/merge_requests/3

I believe this package needs more than this patch: we should use the
salsa CI pipeline from the python team and add some autopkgtests, which
would have caught this issue.

I intend to seek sponsorship with a DD for this NMU and will check with
the python team if they consider salvaging opgpcard to improve it
further than just this NMU.

I hope to hear from you, as I intend this NMU as help to you and users
of this useful package.

Best regards,

Pieter
#1125771#27
Date:
2026-03-10 17:33:47 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
opgpcard, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1125771@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pieter Lenaerts <plenae@disroot.org> (supplier of updated opgpcard package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 08 Mar 2026 10:05:15 +0100
Source: opgpcard
Built-For-Profiles: noudeb
Architecture: source
Version: 0.3.0-2.1
Distribution: unstable
Urgency: medium
Maintainer: ju xor <ju@riseup.net>
Changed-By: Pieter Lenaerts <plenae@disroot.org>
Closes: 1125771
Changes:
 opgpcard (0.3.0-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Add lxml error patch. Closes: #1125771
Checksums-Sha1:
 933fe9bdf826ad01da9c2261e821ecf46165883f 1943 opgpcard_0.3.0-2.1.dsc
 c851bfdd04a7611e18d02fc5c377da5bbb8f0c55 3244 opgpcard_0.3.0-2.1.debian.tar.xz
 8828d8073d8131fc73b0fb3bfb8a6a73cec28570 17387 opgpcard_0.3.0-2.1_source.buildinfo
Checksums-Sha256:
 f69d46909bc2951cd3b8bf31d9b23a98e7fa063fb19f7694d8bc07d5c2371237 1943 opgpcard_0.3.0-2.1.dsc
 9dd66d8c30889528d5605dd0eec429f968e7bb40d326ff5c342d8c0964d68e48 3244 opgpcard_0.3.0-2.1.debian.tar.xz
 aa437e7622dc87550ed2714113d8247cacb9c0dd5788c54c219d6d3a3a624dbb 17387 opgpcard_0.3.0-2.1_source.buildinfo
Files:
 7c3a7ae1fb4153b67358c670c80a010f 1943 misc optional opgpcard_0.3.0-2.1.dsc
 3a863910859861dfb1921396a4343a1e 3244 misc optional opgpcard_0.3.0-2.1.debian.tar.xz
 15ab95889a6b852e844797ba644c3c27 17387 misc optional opgpcard_0.3.0-2.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=rmfN
-----END PGP SIGNATURE-----