[Bug 2061668] Re: [SRU] evtx_filter_records.py crashed with ModuleNotFoundError in Noble

[Sudip Mukherjee]

Attaching updated debdiff for Noble with modified version.

** Summary changed:

- evtx_filter_records.py crashed with ModuleNotFoundError in Noble
+ [SRU] evtx_filter_records.py crashed with ModuleNotFoundError in Noble

** Description changed:

- evtx_filter_records.py fails to run with the error:
+ [ Impact ]
  
- $ evtx_filter_records.py 
+ evtx_filter_records.py will fail to run with the error:
+ 
+ $ evtx_filter_records.py --help
  Traceback (most recent call last):
    File "/usr/bin/evtx_filter_records.py", line 3, in <module>
      from lxml import etree
+ ModuleNotFoundError: No module named 'lxml'
+ 
+ The error is because its missing one of the runtime dependencies.
+ 
+ [ Test Plan ]
+ 
+ 1. install python3-evtx
+ 2. execute evtx_filter_records.py
+ 
+ If the package is not fixed it will result in the above error.
+ 
+ With the fixed package it will print the help message:
+ 
+ $ evtx_filter_records.py  --help
+ usage: evtx_filter_records.py [-h] evtx eid
+ 
+ Print only entries from an EVTX file with a given EID.
+ 
+ positional arguments:
+   evtx        Path to the Windows EVTX file
+   eid         The EID of records to print
+ 
+ options:
+   -h, --help  show this help message and exit
+ 
+ [ Where problems could occur ]
+ 
+ There is no change in code and it only fixes a runtime dependency and so
+ imho, there is very little chance of any regression.
+ 
+ [ Other Info ]
+ 
+ The test folder of the source package contains some .evtx file which we
+ should be able to test but I am trying to figure out "EID" that needs to
+ be mentioned as an argument
+ 
+ [ Original Bug Description ]
+ 
+ evtx_filter_records.py fails to run with the error:
+ 
+ $ evtx_filter_records.py
+ Traceback (most recent call last):
+   File "/usr/bin/evtx_filter_records.py", line 3, in <module>
+     from lxml import etree
  ModuleNotFoundError: No module named 'lxml'
  
  ProblemType: Crash
  DistroRelease: Ubuntu 24.04
  Package: python3-evtx 0.7.4-1
  ProcVersionSignature: Ubuntu 6.8.0-22.22-generic 6.8.1
  Uname: Linux 6.8.0-22-generic x86_64
  ApportVersion: 2.28.0-0ubuntu1
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Apr 15 20:30:18 2024
  Dependencies:
-  python3-more-itertools 10.2.0-1
-  python3-pyparsing 3.1.1-1
-  python3-six 1.16.0-4
-  python3-zipp 1.0.0-6
+  python3-more-itertools 10.2.0-1
+  python3-pyparsing 3.1.1-1
+  python3-six 1.16.0-4
+  python3-zipp 1.0.0-6
  ExecutablePath: /usr/bin/evtx_filter_records.py
  InstallationDate: Installed on 2024-04-10 (5 days ago)
  InstallationMedia: Ubuntu 24.04 LTS "Noble Numbat" - Beta amd64 (20240410)
  InterpreterPath: /usr/bin/python3.12
  JournalErrors: Apr 15 20:30:27 hostname gnome-shell[1186]: meta_window_set_stack_position_no_sync: assertion 'window->stack_position >= 0' failed
  PackageArchitecture: all
  ProcCmdline: /usr/bin/python3 /usr/bin/evtx_filter_records.py
  Python3Details: /usr/bin/python3.12, Python 3.12.2, python3-minimal, 3.12.2-0ubuntu2
  PythonArgs: ['/usr/bin/evtx_filter_records.py']
  PythonDetails: N/A
  SourcePackage: python-evtx
  Title: evtx_filter_records.py crashed with ModuleNotFoundError in __main__: No module named 'lxml'
  Traceback:
-  Traceback (most recent call last):
-    File "/usr/bin/evtx_filter_records.py", line 3, in <module>
-      from lxml import etree
-  ModuleNotFoundError: No module named 'lxml'
+  Traceback (most recent call last):
+    File "/usr/bin/evtx_filter_records.py", line 3, in <module>
+      from lxml import etree
+  ModuleNotFoundError: No module named 'lxml'
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: adm cdrom dip lpadmin plugdev sudo users

** Patch removed: "python-evtx_noble.debdiff"
   https://bugs.launchpad.net/ubuntu/+source/python-evtx/+bug/2061668/+attachment/5766225/+files/python-evtx_noble.debdiff

** Patch added: "python-evtx_noble.debdiff"
   https://bugs.launchpad.net/ubuntu/+source/python-evtx/+bug/2061668/+attachment/5773778/+files/python-evtx_noble.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2061668

Title:
  [SRU] evtx_filter_records.py crashed with ModuleNotFoundError in Noble

Status in python-evtx package in Ubuntu:
  Confirmed
Status in python-evtx package in Debian:
  New

Bug description:
  [ Impact ]

  evtx_filter_records.py will fail to run with the error:

  $ evtx_filter_records.py --help
  Traceback (most recent call last):
    File "/usr/bin/evtx_filter_records.py", line 3, in <module>
      from lxml import etree
  ModuleNotFoundError: No module named 'lxml'

  The error is because its missing one of the runtime dependencies.

  [ Test Plan ]

  1. install python3-evtx
  2. execute evtx_filter_records.py

  If the package is not fixed it will result in the above error.

  With the fixed package it will print the help message:

  $ evtx_filter_records.py  --help
  usage: evtx_filter_records.py [-h] evtx eid

  Print only entries from an EVTX file with a given EID.

  positional arguments:
    evtx        Path to the Windows EVTX file
    eid         The EID of records to print

  options:
    -h, --help  show this help message and exit

  [ Where problems could occur ]

  There is no change in code and it only fixes a runtime dependency and
  so imho, there is very little chance of any regression.

  [ Other Info ]

  The test folder of the source package contains some .evtx file which
  we should be able to test but I am trying to figure out "EID" that
  needs to be mentioned as an argument

  [ Original Bug Description ]

  evtx_filter_records.py fails to run with the error:

  $ evtx_filter_records.py
  Traceback (most recent call last):
    File "/usr/bin/evtx_filter_records.py", line 3, in <module>
      from lxml import etree
  ModuleNotFoundError: No module named 'lxml'

  ProblemType: Crash
  DistroRelease: Ubuntu 24.04
  Package: python3-evtx 0.7.4-1
  ProcVersionSignature: Ubuntu 6.8.0-22.22-generic 6.8.1
  Uname: Linux 6.8.0-22-generic x86_64
  ApportVersion: 2.28.0-0ubuntu1
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Apr 15 20:30:18 2024
  Dependencies:
   python3-more-itertools 10.2.0-1
   python3-pyparsing 3.1.1-1
   python3-six 1.16.0-4
   python3-zipp 1.0.0-6
  ExecutablePath: /usr/bin/evtx_filter_records.py
  InstallationDate: Installed on 2024-04-10 (5 days ago)
  InstallationMedia: Ubuntu 24.04 LTS "Noble Numbat" - Beta amd64 (20240410)
  InterpreterPath: /usr/bin/python3.12
  JournalErrors: Apr 15 20:30:27 hostname gnome-shell[1186]: meta_window_set_stack_position_no_sync: assertion 'window->stack_position >= 0' failed
  PackageArchitecture: all
  ProcCmdline: /usr/bin/python3 /usr/bin/evtx_filter_records.py
  Python3Details: /usr/bin/python3.12, Python 3.12.2, python3-minimal, 3.12.2-0ubuntu2
  PythonArgs: ['/usr/bin/evtx_filter_records.py']
  PythonDetails: N/A
  SourcePackage: python-evtx
  Title: evtx_filter_records.py crashed with ModuleNotFoundError in __main__: No module named 'lxml'
  Traceback:
   Traceback (most recent call last):
     File "/usr/bin/evtx_filter_records.py", line 3, in <module>
       from lxml import etree
   ModuleNotFoundError: No module named 'lxml'
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: adm cdrom dip lpadmin plugdev sudo users

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-evtx/+bug/2061668/+subscriptions