Package: python-urllib3 Version: 1.19.1-1 Severity: important setup.py does not have a version constraint on six as it is vendored upstream, but since we are unvendoring it in Debian, we need a version constraint. This is made trickier by the fact that upstream won't be tracking the minimum version for us, as they only need to care about the specific version they vendor. Perhaps a >= <version that is vendored> constraint in Debian would be the easiest?
-- System Information: Debian Release: 9.0 APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing'), (101, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_ZA.utf8, LC_CTYPE=en_ZA.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages python-urllib3 depends on: ii python-six 1.10.0-4 pn python:any <none> Versions of packages python-urllib3 recommends: ii ca-certificates 20161130 ii python-cryptography 1.7.1-2 ii python-idna 2.2-1 ii python-ipaddress 1.0.17-1 ii python-openssl 16.2.0-1 Versions of packages python-urllib3 suggests: pn python-ntlm <none> pn python-socks <none> -- no debconf information
