Your message dated Fri, 03 Jan 2025 18:32:11 +0000
with message-id <[email protected]>
and subject line Bug#1089507: fixed in python-urllib3 1.26.12-1+deb12u1
has caused the Debian Bug report #1089507,
regarding urllib3.util.ssltransport module still refers to embedded python-six
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1089507: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089507
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: python3-urllib3
Version: 1.26.12-1
The 01_do-not-use-embedded-python-six.patch file is missing an edit to
src/urllib3/util/ssltransport.py.
Saw this in the course of building yt-dlp on bookworm:
___________________ ERROR collecting test/test_http_proxy.py ___________________
ImportError while importing test module
'/tmp/yt-dlp-2024.12.06/test/test_http_proxy.py'.
Hint: make sure your test modules/packages have valid Python names.
Traceback:
/usr/lib/python3.11/importlib/__init__.py:126: in import_module
return _bootstrap._gcd_import(name[level:], package, level)
test/test_http_proxy.py:88: in <module>
import urllib3.util.ssltransport
/usr/lib/python3/dist-packages/urllib3/util/ssltransport.py:6: in <module>
from ..packages import six
E ImportError: cannot import name 'six' from 'urllib3.packages'
(/usr/lib/python3/dist-packages/urllib3/packages/__init__.py)
--- End Message ---
--- Begin Message ---
Source: python-urllib3
Source-Version: 1.26.12-1+deb12u1
Done: Guilhem Moulin <[email protected]>
We believe that the bug you reported is fixed in the latest version of
python-urllib3, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guilhem Moulin <[email protected]> (supplier of updated python-urllib3 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 21 Dec 2024 15:28:17 +0100
Source: python-urllib3
Architecture: source
Version: 1.26.12-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Python Team <[email protected]>
Changed-By: Guilhem Moulin <[email protected]>
Closes: 1053626 1054226 1074149 1089507
Changes:
python-urllib3 (1.26.12-1+deb12u1) bookworm; urgency=medium
.
* Non-maintainer upload.
* Fix CVE-2023-43804: Cookie request header isn't stripped during
cross-origin redirects. (Closes: #1053626)
* Fix CVE-2023-45803: Request body not stripped after redirect from 303
status changes request method to GET. (Closes: #1054226)
* Fix CVE-2024-37891: Proxy-Authorization request header isn't stripped
during cross-origin redirects. (Closes: #1074149)
* Use system 'six' module in urllib3.util.ssltransport. (Closes: #1089507)
* Fix test/test_connectionpool.py (currently ignored).
* Adjust d/salsa-ci.yml for bookworm.
* Adjust d/gbp.conf for bookworm.
Checksums-Sha1:
08eb63f131adf196ba857c24f8840b943c6b8f59 2344
python-urllib3_1.26.12-1+deb12u1.dsc
d6b3be6598bdb83f9e772b180cd17301c67345a8 16004
python-urllib3_1.26.12-1+deb12u1.debian.tar.xz
348e8b88cf8f44d49dd01399341576ee0c61c790 7412
python-urllib3_1.26.12-1+deb12u1_amd64.buildinfo
Checksums-Sha256:
c3c9eb0a71d0f63c3bb43948aa8c10ad2a64e0fade64c6299ac4f6147c585e13 2344
python-urllib3_1.26.12-1+deb12u1.dsc
f556a06253aaaffa8cbe0505e49c1a6a27c7293e2f2f3bdb3fe1e6636963e729 16004
python-urllib3_1.26.12-1+deb12u1.debian.tar.xz
05d6df5de4cac0d260e8bce00ec3f7665dd0855d7c0324191d45438871281f33 7412
python-urllib3_1.26.12-1+deb12u1_amd64.buildinfo
Files:
d973c60dde044aaaf3637c51b1e26048 2344 python optional
python-urllib3_1.26.12-1+deb12u1.dsc
aae21d1f0f255578dfa99bb31b557699 16004 python optional
python-urllib3_1.26.12-1+deb12u1.debian.tar.xz
b2de45aed98078c2dae02305f75afa03 7412 python optional
python-urllib3_1.26.12-1+deb12u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmdm1o4ACgkQ05pJnDwh
pVJ3XBAAk51mJ3sGYQr41FGE7MWY65nctnMPLYeqiIa1cTXPP1EF+nj5k6t+dyEG
gxP/WJqWmNqqxhHxH+TY1DHJ5H8X60G9ltH3HjY9dkD6H1mIFp65d4KV7AuGREgI
KOEArNrgXJ1qNUKBrhVyzSS0DjvMmfONKUCdADiNjDCkH7tFR+kuamDwblDtfC5T
V8B/2m5uELraMTCawJl0sS88Rrsx7cZjbGSLqJVTzrnqEA0oIdcO7M92GN+KrLgi
y9yf3rJVCGal8GcMffEcUFpB0/H0mQDX6Ppjw6mGOyfhCBi6+vrKyKVMRjUC7pEA
BaN26kF+Reak+aHP9M1n5bQRg1YjorhJsbWCeK7LVRGcLjcRH2kDoN4z5JxTDyU+
3UuwTxnoD45yFCQ2V3U4scA3H0mnX2yLizQTMk83L469Tmppv1TuR6hFl+mrThFF
0EiaxpoM72BK44o4tgpvBlPmdb6FpWg8pLlhFoGwZ9iAbWrmKcGSBYvuI8mE6cct
+DK09OpbZuseTvsjj8XDwIEQa+qQIXB+6MYcn/IJpOM0evP4dCCZ+HqkoI+gZpzr
ipMAkQ0ui1LGeH1qPu+PTKmBt9mPtGLEUfN7Kd6pm27SXDNRwLSVRK+qIsfpMZW9
Km8DYj+DlHtDfq2wFUf9Jn7ciNLv8+V/tbH7ODjrlXSV69aVI5Y=
=TSID
-----END PGP SIGNATURE-----
pgpDnGg8sDXI5.pgp
Description: PGP signature
--- End Message ---
