[Python-modules-team] Bug#932960: python-django doesn't fix a CVE and drops Python 2 support at the same time

[Paul Gevers]

Hi,

On Fri, 02 Aug 2019 23:02:51 +0100 "Chris Lamb" <lamby at debian.org> wrote:
> So, it looks like:
> 
>     django-compat django-hijack
>     django-ratelimit
>     django-testscenarios
>     grr
>     python-aws-xray-sdk
>     python-carrot
>     python-django-bootstrap-form
>     python-oauth2client
>     python-semantic-version
> 
> … still Build-Depend or Build-Depend-Indep on python-django.
> 
> (Zigo, did you neglect python-oauth2client and python-semantic-version
> in your mass uploads recently?)

The list is going down steadily. Currently this is what I see as remaining:

paul at testavoira ~ $ reverse-depends -b python-django
Reverse-Build-Depends-Indep
===========================
* kombu
* python-django-bootstrap-form
* python-django-registration
* python-oauth2client
* python-semantic-version

Reverse-Build-Depends
=====================
* django-compat
* django-hijack
* django-modeltranslation
* django-nose
* django-picklefield
* django-prometheus
* django-ratelimit
* grr
* mini-buildd
* python-aws-xray-sdk

paul at testavoira ~ $ reverse-depends python-django
Reverse-Depends
===============
* bcfg2-web
* djagios
* grr-server
* python-ajax-select
* python-bootstrapform
* python-django-app-plugins
* python-django-compat
* python-django-modeltranslation
* python-django-nose
* python-django-picklefield
* python-django-prometheus
* python-django-ratelimit
* python-django-registration
* python-django-rosetta
* python-django-threaded-multihost
* python-mini-buildd

Packages without architectures listed are reverse-dependencies in:
amd64, arm64, armel, armhf, i386, mipsel, ppc64el, s390x

And the lava autopkgtest failure, however src:lava is currently marked
for autoremoval on 7 September.

The dependencies are properly tracked by britney, I'll drop my block
when all the reverse build dependencies are fixed.

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/python-modules-team/attachments/20190831/0d9b37bd/attachment-0001.sig>