Your message dated Sat, 19 Sep 2020 20:41:06 +0000
with message-id <e1kjjfo-00032m...@fasolo.debian.org>
and subject line Bug#970567: fixed in pyzmq 17.1.2-2+deb10u1
has caused the Debian Bug report #970567,
regarding pyzmq: TestAsyncioAuthentication::test_blacklist hanging after 
CVE-2020-15166 bugfix for zeromq3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
970567: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970567
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: pyzmq
Version: 17.1.2-2
Severity: serious
Tags: upstream,patch,fixed-upstream
Justification: FTBFS
Forwarded: https://github.com/zeromq/pyzmq/issues/1418
X-Debbugs-Cc: 
car...@debian.org,t...@security.debian.org,bl...@debian.org,g...@debian.org
Control: fixed -1 19.0.2-2
Control: affects -1 + release.debian.org,security.debian.org

Hi

After the CVE-2020-15166 fix in zeromq3 the upstream test
TestAsyncioAuthentication::test_blacklist will hang, cf [1].

This was already fixed in unstable. For stable this would cause an
issue when pyzmq would need to be rebuild. It though does not warrant
a regression update via security because. The test was actually
relying on the broken behaviour afaiu.

 [1] https://github.com/zeromq/pyzmq/issues/1418
 [2] 
https://github.com/zeromq/pyzmq/commit/afd72820946f544790c6f70d90ba50eb29f1c6e1

Regards,
Salvatore

--- End Message ---
--- Begin Message ---
Source: pyzmq
Source-Version: 17.1.2-2+deb10u1
Done: Salvatore Bonaccorso <car...@debian.org>

We believe that the bug you reported is fixed in the latest version of
pyzmq, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 970...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <car...@debian.org> (supplier of updated pyzmq package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 18 Sep 2020 21:43:25 +0200
Source: pyzmq
Architecture: source
Version: 17.1.2-2+deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian Python Modules Team 
<python-modules-t...@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Closes: 970567
Changes:
 pyzmq (17.1.2-2+deb10u1) buster; urgency=medium
 .
   * Non-maintainer upload.
   * asyncio: wait for POLLOUT on sender in can_connect (Closes: #970567)
Checksums-Sha1: 
 d96aa6b181be6454b037d52c13d311940b708a3b 3268 pyzmq_17.1.2-2+deb10u1.dsc
 ab688551407f86b8cfad4f0089e041cf27eb899f 10068 
pyzmq_17.1.2-2+deb10u1.debian.tar.xz
Checksums-Sha256: 
 7741d52606823eb18f1eff6bfc66a5618aa0ba6924185e2bc210d3437dc3abfc 3268 
pyzmq_17.1.2-2+deb10u1.dsc
 2764e3373ee71b2e2c7d195637e355937cc4d432d716b6ecf2682599ba9e0ef3 10068 
pyzmq_17.1.2-2+deb10u1.debian.tar.xz
Files: 
 044b0704a4a3af72a93bcc918252302c 3268 python optional 
pyzmq_17.1.2-2+deb10u1.dsc
 ca3c574c4e377720fcb29ecaa265edda 10068 python optional 
pyzmq_17.1.2-2+deb10u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=cN56
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Python-modules-team mailing list
Python-modules-team@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/python-modules-team

Reply via email to