Bug#940682: lava-server: depends on cruft package.

2019-10-03 Thread Remi Duraffort
> lava depends on gunicorn3 which is no longer built by the gunicorn source package. I belive you need to change your dependency to gunicorn, possiblly with a version constraint of >= 19.9.0-4 Should be fixed by https://git.lavasoftware.org/lava/lava/merge_requests/737 Thanks for reporting the i

Bug#933919: src:lavacli: Unsafe use of yaml.load()

2019-09-18 Thread Remi Duraffort
Hello, looking at the failing CI jobs at https://ci.debian.net/packages/l/lavacli/unstable/amd64/ (more precisely https://ci.debian.net/data/autopkgtest/unstable/amd64/l/lavacli/2666918/log.gz) we can see that the failure is due to a change in python3-yaml package that break the lavacli unit tests

Bug#933919: src:lavacli: Unsafe use of yaml.load()

2019-09-18 Thread Remi Duraffort
On Mon, 05 Aug 2019 01:31:12 -0400 Scott Kitterman wrote: > Package: src:lavacli > Version: 0.9.7-1 > Severity: grave > Tags: security > Justification: user security hole > > The new version of pyyaml no longer allows use of yaml.load() without a > loader being specifed. This raises a deprecation

Bug#748092: salt-ssh: Missing dependency to python-zmq

2014-05-14 Thread Remi Duraffort
Package: salt-ssh Version: 2014.1.4+ds-1 Severity: grave Justification: renders package unusable Dear Maintainer, salt-ssh should depends on python-zmq to be usable standalone (without installing salt-master) * What led up to the situation? [root] # apt-get install salt-ssh [root] # salt-s