Bug#933919: src:lavacli: Unsafe use of yaml.load()

2019-09-19 Thread Scott Kitterman
On Thursday, September 19, 2019 2:54:50 AM EDT Remi Duraffort wrote: > Hello, > > looking at the failing CI jobs at > https://ci.debian.net/packages/l/lavacli/unstable/amd64/ (more precisely > https://ci.debian.net/data/autopkgtest/unstable/amd64/l/lavacli/2666918/log. > gz) we can see that the fa

Bug#933919: src:lavacli: Unsafe use of yaml.load()

2019-09-18 Thread Remi Duraffort
Hello, looking at the failing CI jobs at https://ci.debian.net/packages/l/lavacli/unstable/amd64/ (more precisely https://ci.debian.net/data/autopkgtest/unstable/amd64/l/lavacli/2666918/log.gz) we can see that the failure is due to a change in python3-yaml package that break the lavacli unit tests

Bug#933919: src:lavacli: Unsafe use of yaml.load()

2019-09-18 Thread Remi Duraffort
On Mon, 05 Aug 2019 01:31:12 -0400 Scott Kitterman wrote: > Package: src:lavacli > Version: 0.9.7-1 > Severity: grave > Tags: security > Justification: user security hole > > The new version of pyyaml no longer allows use of yaml.load() without a > loader being specifed. This raises a deprecation

Bug#933919: src:lavacli: Unsafe use of yaml.load()

2019-09-02 Thread Steve McIntyre
On Mon, Aug 05, 2019 at 01:31:12AM -0400, Scott Kitterman wrote: >Package: src:lavacli >Version: 0.9.7-1 >Severity: grave >Tags: security >Justification: user security hole > >The new version of pyyaml no longer allows use of yaml.load() without a >loader being specifed. This raises a deprecation

Bug#933919: src:lavacli: Unsafe use of yaml.load()

2019-08-04 Thread Scott Kitterman
Package: src:lavacli Version: 0.9.7-1 Severity: grave Tags: security Justification: user security hole The new version of pyyaml no longer allows use of yaml.load() without a loader being specifed. This raises a deprecation warning which has caused and autopkgtest failure on this package. These