Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.python > #11553 > unrolled thread
| Started by | Scott Kitterman <debian@kitterman.com> |
|---|---|
| First post | 2019-08-05 01:10 +0200 |
| Last post | 2019-08-06 06:20 +0200 |
| Articles | 2 — 1 participant |
Back to article view | Back to linux.debian.maint.python
Update for pyyaml Scott Kitterman <debian@kitterman.com> - 2019-08-05 01:10 +0200
Re: Update for pyyaml Scott Kitterman <debian@kitterman.com> - 2019-08-06 06:20 +0200
| From | Scott Kitterman <debian@kitterman.com> |
|---|---|
| Date | 2019-08-05 01:10 +0200 |
| Subject | Update for pyyaml |
| Message-ID | <yrxNv-5yL-1@gated-at.bofh.it> |
I'm about to upload an updated pyyaml. It adds deprecation warnings for unsafe pyyaml usage [1]. If you maintain a package that uses pyyaml, you should check and make sure it is using it in a safe way. Since it's a warning and not an error, I don't expect the update to actually break thins, but it's a good time to be checking. I looked and python-yaml has over 100 rdepends, so this is not something I can check myself. Scott K [1] https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
[toc] | [next] | [standalone]
| From | Scott Kitterman <debian@kitterman.com> |
|---|---|
| Date | 2019-08-06 06:20 +0200 |
| Message-ID | <yrZ73-5Qb-1@gated-at.bofh.it> |
| In reply to | #11553 |
On Monday, August 5, 2019 8:53:21 AM EDT merkys@debian.org wrote: > Hi Scott, > > On 2019-08-05 02:07, Scott Kitterman wrote: > > I'm about to upload an updated pyyaml. It adds deprecation warnings for > > unsafe pyyaml usage [1]. If you maintain a package that uses pyyaml, you > > should check and make sure it is using it in a safe way. Since it's a > > warning and not an error, I don't expect the update to actually break > > thins, but it's a good time to be checking. > > Thanks a lot for doing this. I believe #918890 can be closed now. Closed. Thanks. > Package Tracker shows some failing autopkgtests for the rdepends [1]. Am > I right to assume that it's OK to patch these rdepends to use safe > pyyaml reader? > > Best, > Andrius > > #918890 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918890 > [1] https://tracker.debian.org/pkg/pyyaml valinor I've fixed. python-tablib turns out to be unrelated. python-markdown was handled with a new upstream release. The rest need fixing. Scott K
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.maint.python
csiph-web