Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.python > #11881
| From | Daniele Tricoli <eriol@debian.org> |
|---|---|
| Newsgroups | linux.debian.maint.python |
| Subject | Re: python-urllib3 1.25.6 uploaded to experimental (closes CVE-2019-11236) but fails build tests |
| Date | 2019-10-12 17:00 +0200 |
| Message-ID | <yQr2a-Ho-5@gated-at.bofh.it> (permalink) |
| References | <yQiLf-4aC-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
Hi Drew, On 12/10/2019 07:57, Drew Parsons wrote: > Hi Daniele, just letting you know I uploaded python-urllib3 1.25.6 to > experimental. Thanks for taking care of urllib3. > I was having some SSL trouble connecting to https://pub.orcid.org. The error > trace cited urllib3/contrib/pyopenssl.py, so I downloaded and installed > python-urllib3 1.25.6 to see if updates to default SSL/TLS versions made any > difference. It didn't fix my problem, but since I had the package update ready > I figured I might as well present it to experimental. I hope to have the time to investigate also this: urllib3/contrib/pyopenssl.py contains code to have SSL with SNI_-support for Python 2 and it depends on pyOpenSSL, cryptography and idna. Maybe looking at them can give us more clues. Also, could you see if using Python3 the connection to https://pub.orcid.org work? > The new version fixes CVE-2019-11236 (Bug#927172). As far as I can tell it > also fixes CVE-2019-11324 (Bug#927412), but I figured it's best to let you > review that. > > Th package build was successful on my system but gives build-time errors in > chroot (on buildd). I'm not sure why that's failing. I will look at them during this weekend, I already had a look at build log from the phone, but it's better to look from a PC. Regards, -- Daniele Tricoli 'eriol' https://mornie.org
Back to linux.debian.maint.python | Previous | Next — Previous in thread | Find similar | Unroll thread
python-urllib3 1.25.6 uploaded to experimental (closes CVE-2019-11236) but fails build tests Drew Parsons <dparsons@debian.org> - 2019-10-12 08:10 +0200 Re: python-urllib3 1.25.6 uploaded to experimental (closes CVE-2019-11236) but fails build tests Daniele Tricoli <eriol@debian.org> - 2019-10-12 17:00 +0200
csiph-web