Your message dated Mon, 22 Nov 2021 16:04:27 +0000
with message-id <e1mpbnv-000cm9...@fasolo.debian.org>
and subject line Bug#1000182: fixed in python-jira 3.1.1-1
has caused the Debian Bug report #1000182,
regarding python-jira: network access during the build
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1000182: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000182
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: python-jira
Version: 3.0-1
Severity: serious

Dear maintainer,

It has been brought to our attention[1] that python-jira is doing
network access during its build.

On a build with network enabled:

|PYTHONPATH=. http_proxy='127.0.0.1:9' python3 -m sphinx -N -bhtml docs/ 
build/html # HTML generator
|Running Sphinx v4.2.0
|making output directory... done
|loading intersphinx inventory from https://docs.python.org/3.7/objects.inv...
|loading intersphinx inventory from 
https://requests.kennethreitz.org/en/master/objects.inv...
|loading intersphinx inventory from 
https://requests-oauthlib.readthedocs.io/en/latest/objects.inv...
|loading intersphinx inventory from 
https://ipython.readthedocs.io/en/stable/objects.inv...
|loading intersphinx inventory from 
https://pip.readthedocs.io/en/stable/objects.inv...
|intersphinx inventory has moved: 
https://pip.readthedocs.io/en/stable/objects.inv -> 
https://pip.pypa.io/en/stable/objects.inv

On a build with a skewed clock:

|PYTHONPATH=. http_proxy='127.0.0.1:9' python3 -m sphinx -N -bhtml docs/ 
build/html # HTML generator
|Running Sphinx v4.2.0
|making output directory... done
|loading intersphinx inventory from https://docs.python.org/3.7/objects.inv...
|loading intersphinx inventory from 
https://requests.kennethreitz.org/en/master/objects.inv...
|loading intersphinx inventory from 
https://requests-oauthlib.readthedocs.io/en/latest/objects.inv...
|loading intersphinx inventory from 
https://ipython.readthedocs.io/en/stable/objects.inv...
|loading intersphinx inventory from 
https://pip.readthedocs.io/en/stable/objects.inv...
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 
'https://requests.kennethreitz.org/en/master/objects.inv' not fetchable due to 
<class 'requests.exceptions.SSLError'>: 
HTTPSConnectionPool(host='requests.kennethreitz.org', port=443): Max retries 
exceeded with url: /en/master/objects.inv (Caused by 
SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] 
certificate verify failed: certificate has expired (_ssl.c:1129)')))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 'https://ipython.readthedocs.io/en/stable/objects.inv' 
not fetchable due to <class 'requests.exceptions.SSLError'>: 
HTTPSConnectionPool(host='ipython.readthedocs.io', port=443): Max retries 
exceeded with url: /en/stable/objects.inv (Caused by 
SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] 
certificate verify failed: certificate has expired (_ssl.c:1129)')))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 
'https://requests-oauthlib.readthedocs.io/en/latest/objects.inv' not fetchable 
due to <class 'requests.exceptions.SSLError'>: 
HTTPSConnectionPool(host='requests-oauthlib.readthedocs.io', port=443): Max 
retries exceeded with url: /en/latest/objects.inv (Caused by 
SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] 
certificate verify failed: certificate has expired (_ssl.c:1129)')))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 'https://pip.readthedocs.io/en/stable/objects.inv' not 
fetchable due to <class 'requests.exceptions.SSLError'>: 
HTTPSConnectionPool(host='pip.readthedocs.io', port=443): Max retries exceeded 
with url: /en/stable/objects.inv (Caused by 
SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] 
certificate verify failed: certificate has expired (_ssl.c:1129)')))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 'https://docs.python.org/3.7/objects.inv' not fetchable 
due to <class 'requests.exceptions.SSLError'>: 
HTTPSConnectionPool(host='docs.python.org', port=443): Max retries exceeded 
with url: /3.7/objects.inv (Caused by SSLError(SSLCertVerificationError(1, 
'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has 
expired (_ssl.c:1129)')))

On a build with network blocked:

|PYTHONPATH=. http_proxy='127.0.0.1:9' python3 -m sphinx -N -bhtml docs/ 
build/html # HTML generator
|Running Sphinx v4.2.0
|making output directory... done
|loading intersphinx inventory from https://docs.python.org/3.7/objects.inv...
|loading intersphinx inventory from 
https://requests.kennethreitz.org/en/master/objects.inv...
|loading intersphinx inventory from 
https://requests-oauthlib.readthedocs.io/en/latest/objects.inv...
|loading intersphinx inventory from 
https://ipython.readthedocs.io/en/stable/objects.inv...
|loading intersphinx inventory from 
https://pip.readthedocs.io/en/stable/objects.inv...
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 
'https://requests-oauthlib.readthedocs.io/en/latest/objects.inv' not fetchable 
due to <class 'requests.exceptions.ConnectionError'>: 
HTTPSConnectionPool(host='requests-oauthlib.readthedocs.io', port=443): Max 
retries exceeded with url: /en/latest/objects.inv (Caused by 
NewConnectionError('<urllib3.connection.HTTPSConnection object at 
0x7f7041681cd0>: Failed to establish a new connection: [Errno -3] Temporary 
failure in name resolution'))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 'https://ipython.readthedocs.io/en/stable/objects.inv' 
not fetchable due to <class 'requests.exceptions.ConnectionError'>: 
HTTPSConnectionPool(host='ipython.readthedocs.io', port=443): Max retries 
exceeded with url: /en/stable/objects.inv (Caused by 
NewConnectionError('<urllib3.connection.HTTPSConnection object at 
0x7f7041681b20>: Failed to establish a new connection: [Errno -3] Temporary 
failure in name resolution'))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 'https://docs.python.org/3.7/objects.inv' not fetchable 
due to <class 'requests.exceptions.ConnectionError'>: 
HTTPSConnectionPool(host='docs.python.org', port=443): Max retries exceeded 
with url: /3.7/objects.inv (Caused by 
NewConnectionError('<urllib3.connection.HTTPSConnection object at 
0x7f7041681700>: Failed to establish a new connection: [Errno -3] Temporary 
failure in name resolution'))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 'https://pip.readthedocs.io/en/stable/objects.inv' not 
fetchable due to <class 'requests.exceptions.ConnectionError'>: 
HTTPSConnectionPool(host='pip.readthedocs.io', port=443): Max retries exceeded 
with url: /en/stable/objects.inv (Caused by 
NewConnectionError('<urllib3.connection.HTTPSConnection object at 
0x7f70416a1580>: Failed to establish a new connection: [Errno -3] Temporary 
failure in name resolution'))
|WARNING: failed to reach any of the inventories with the following issues:
|intersphinx inventory 
'https://requests.kennethreitz.org/en/master/objects.inv' not fetchable due to 
<class 'requests.exceptions.ConnectionError'>: 
HTTPSConnectionPool(host='requests.kennethreitz.org', port=443): Max retries 
exceeded with url: /en/master/objects.inv (Caused by 
NewConnectionError('<urllib3.connection.HTTPSConnection object at 
0x7f70426c1fa0>: Failed to establish a new connection: [Errno -3] Temporary 
failure in name resolution'))


Even *attempting* network access is forbidden for Debian main packages,
see Policy ยง4.9 "Main building script: debian/rules":
    For packages in the main archive, required targets must not attempt
    network access, except, via the loopback interface, to services on
    the build host that have been started by the build.



[1] 
https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20211115/013319.html

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
More about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message ---
Source: python-jira
Source-Version: 3.1.1-1
Done: Neil Williams <codeh...@debian.org>

We believe that the bug you reported is fixed in the latest version of
python-jira, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1000...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Neil Williams <codeh...@debian.org> (supplier of updated python-jira package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Nov 2021 09:42:56 +0000
Source: python-jira
Architecture: source
Version: 3.1.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+pyt...@tracker.debian.org>
Changed-By: Neil Williams <codeh...@debian.org>
Closes: 1000182
Changes:
 python-jira (3.1.1-1) unstable; urgency=medium
 .
   * Team upload.
   * Fix dh_python depends (lintian error)
   * Add Salsa CI
   * Update standards version
   * Use local doc packages for intersphinx-mapping in documentation
     build to prevent network access during the build. (Closes: #1000182)
   * New upstream release.
Checksums-Sha1:
 d50e79b13c7dbf9e9f0e029c36fd85934ad77661 2507 python-jira_3.1.1-1.dsc
 86d9b0244d16f1e72b78705d79921d27ef021ed1 153640 python-jira_3.1.1.orig.tar.gz
 5acc7a0a6c2d934d3518321fe860d93596387f10 4180 python-jira_3.1.1-1.debian.tar.xz
 465aff0ffd0e30f9fc147c20cc556e3c33943b5f 9714 
python-jira_3.1.1-1_amd64.buildinfo
Checksums-Sha256:
 0541088b938f6f8d0a581c2f6e0f5e1b295aff97b90c67da129ff019989d71fd 2507 
python-jira_3.1.1-1.dsc
 09751e025ed8cb69dcee3fd71cd8b6870b97a5eba3b3a4af405bf27530e8d049 153640 
python-jira_3.1.1.orig.tar.gz
 2cca8dab6aa89fd5c1f9a1cff2a17bc8f139207a97e5c7135f13370f036a7207 4180 
python-jira_3.1.1-1.debian.tar.xz
 b0a0d771a30985224df8b07a29a2c1df0c05778a107860a239527e1d32b3af99 9714 
python-jira_3.1.1-1_amd64.buildinfo
Files:
 33f53a1ac0bfc62c9b08602e803cd088 2507 python optional python-jira_3.1.1-1.dsc
 df51ac400daf45f98505821d2febd104 153640 python optional 
python-jira_3.1.1.orig.tar.gz
 d4b01037e0f7f613140cf3692a058585 4180 python optional 
python-jira_3.1.1-1.debian.tar.xz
 fe89eccf328ab1c779c6f363ccaf572f 9714 python optional 
python-jira_3.1.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0mZL
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to