Bug#593269: downloads code from the internet during build

2010-08-18 Thread Iustin Pop
On Wed, Aug 18, 2010 at 08:12:24PM +0200, Iustin Pop wrote: > On Wed, Aug 18, 2010 at 07:46:37PM +0200, Peter Palfrader wrote: > > It might not be something we can fix for this release, but I think this > > is a significant security bug in the source package. > > Unfortunately, my first investigat

Bug#593269: downloads code from the internet during build

2010-08-18 Thread Iustin Pop
On Wed, Aug 18, 2010 at 07:46:37PM +0200, Peter Palfrader wrote: > On Wed, 18 Aug 2010, Iustin Pop wrote: > > > First, thanks for reporting this. But I cannot reproduce this on > > unstable (in a clean pbuilder chroot), since the python-setuptools > > is new enough (for sid). > > > > While the be

Bug#593269: downloads code from the internet during build

2010-08-18 Thread Peter Palfrader
On Wed, 18 Aug 2010, Iustin Pop wrote: > First, thanks for reporting this. But I cannot reproduce this on > unstable (in a clean pbuilder chroot), since the python-setuptools > is new enough (for sid). > > While the behaviour of stable builds is not good (and the versioned > dependency is incorre

Bug#593269: downloads code from the internet during build

2010-08-17 Thread Iustin Pop
On Mon, Aug 16, 2010 at 10:16:38PM +0200, Peter Palfrader wrote: > Source: protobuf > Version: 2.3.0-3 > Severity: serious > > During building your package on stable: > > | make[1]: Leaving directory `/home/weasel/.temp/2010-08-16/protobuf-2.3.0' > | # python bindings > | cd python && python setu

Bug#593269: downloads code from the internet during build

2010-08-16 Thread Peter Palfrader
Source: protobuf Version: 2.3.0-3 Severity: serious During building your package on stable: | make[1]: Leaving directory `/home/weasel/.temp/2010-08-16/protobuf-2.3.0' | # python bindings | cd python && python setup.py build | | ---