Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.python > #11880

python-urllib3 1.25.6 uploaded to experimental (closes CVE-2019-11236) but fails build tests

Show all headers | View raw

Hi Daniele, just letting you know I uploaded python-urllib3 1.25.6 to 
experimental.

I was having some SSL trouble connecting to https://pub.orcid.org.  The 
error trace cited urllib3/contrib/pyopenssl.py, so I downloaded and 
installed python-urllib3 1.25.6 to see if updates to default SSL/TLS 
versions made any difference.  It didn't fix my problem, but since I had 
the package update ready I figured I might as well present it to 
experimental.

The new version fixes CVE-2019-11236 (Bug#927172).  As far as I can tell 
it also fixes CVE-2019-11324 (Bug#927412), but I figured it's best to 
let you review that.

Th package build was successful on my system but gives build-time errors 
in chroot (on buildd).  I'm not sure why that's failing.

Drew

Back to linux.debian.maint.python | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

python-urllib3 1.25.6 uploaded to experimental (closes  CVE-2019-11236) but fails build tests Drew Parsons <dparsons@debian.org> - 2019-10-12 08:10 +0200
  Re: python-urllib3 1.25.6 uploaded to experimental (closes  CVE-2019-11236) but fails build tests Daniele Tricoli <eriol@debian.org> - 2019-10-12 17:00 +0200

csiph-web