Source: pyzmq
Version: 17.1.2-2
Severity: serious
Tags: upstream,patch,fixed-upstream
Justification: FTBFS
Forwarded: https://github.com/zeromq/pyzmq/issues/1418
X-Debbugs-Cc: 
car...@debian.org,t...@security.debian.org,bl...@debian.org,g...@debian.org
Control: fixed -1 19.0.2-2
Control: affects -1 + release.debian.org,security.debian.org

Hi

After the CVE-2020-15166 fix in zeromq3 the upstream test
TestAsyncioAuthentication::test_blacklist will hang, cf [1].

This was already fixed in unstable. For stable this would cause an
issue when pyzmq would need to be rebuild. It though does not warrant
a regression update via security because. The test was actually
relying on the broken behaviour afaiu.

 [1] https://github.com/zeromq/pyzmq/issues/1418
 [2] 
https://github.com/zeromq/pyzmq/commit/afd72820946f544790c6f70d90ba50eb29f1c6e1

Regards,
Salvatore

_______________________________________________
Python-modules-team mailing list
Python-modules-team@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/python-modules-team

Reply via email to