Debian Bug report logs -
#938438
scap-security-guide: Python2 removal in sid/bullseye
Reported by: Matthias Klose <doko@debian.org>
Date: Fri, 30 Aug 2019 09:36:58 UTC
Severity: normal
Tags: bookworm, bullseye, sid
Found in version scap-security-guide/0.1.39-2
Fixed in version scap-security-guide/0.1.62-1
Done: Paul Wise <pabs@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to Debian Security Tools <team+pkg-security@tracker.debian.org>:
Bug#938438; Package src:scap-security-guide.
(Fri, 30 Aug 2019 09:37:01 GMT) (full text, mbox, link).
Acknowledgement sent
to Matthias Klose <doko@debian.org>:
New Bug report received and forwarded. Copy sent to Debian Security Tools <team+pkg-security@tracker.debian.org>.
(Fri, 30 Aug 2019 09:37:01 GMT) (full text, mbox, link).
Message #5 received at maintonly@bugs.debian.org (full text, mbox, reply):
Package: src:scap-security-guide
Version: 0.1.39-2
Severity: normal
Tags: sid bullseye
User: debian-python@lists.debian.org
Usertags: py2removal
Python2 becomes end-of-live upstream, and Debian aims to remove
Python2 from the distribution, as discussed in
https://lists.debian.org/debian-python/2019/07/msg00080.html
Your package either build-depends, depends on Python2, or uses Python2
in the autopkg tests. Please stop using Python2, and fix this issue
by one of the following actions.
- Convert your Package to Python3. This is the preferred option. In
case you are providing a Python module foo, please consider dropping
the python-foo package, and only build a python3-foo package. Please
don't drop Python2 modules, which still have reverse dependencies,
just document them.
This is the preferred option.
- If the package is dead upstream, cannot be converted or maintained
in Debian, it should be removed from the distribution. If the
package still has reverse dependencies, raise the severity to
"serious" and document the reverse dependencies with the BTS affects
command. If the package has no reverse dependencies, confirm that
the package can be removed, reassign this issue to ftp.debian.org,
make sure that the bug priority is set to normal and retitle the
issue to "RM: PKG -- removal triggered by the Python2 removal".
- If the package has still many users (popcon >= 300), or is needed to
build another package which cannot be removed, document that by
adding the "py2keep" user tag (not replacing the py2remove tag),
using the debian-python@lists.debian.org user. Also any
dependencies on an unversioned python package (python, python-dev)
must not be used, same with the python shebang. These have to be
replaced by python2/python2.7 dependencies and shebang.
This is the least preferred option.
If the conversion or removal needs action on another package first,
please document the blocking by using the BTS affects command, like
affects <bug number of blocking py2removal bug> + src:scap-security-guide
If there is no py2removal bug for that reverse-dependency, please file
a bug on this package (similar to this bug report).
If there are questions, please refer to the wiki page for the removal:
https://wiki.debian.org/Python/2Removal, or ask for help on IRC
#debian-python, or the debian-python@lists.debian.org mailing list.
Added indication that bug 938438 blocks 938309
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Mon, 21 Oct 2019 22:48:13 GMT) (full text, mbox, link).
Added indication that bug 938438 blocks 938355
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Mon, 21 Oct 2019 23:01:03 GMT) (full text, mbox, link).
Added indication that bug 938438 blocks 936973
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Mon, 21 Oct 2019 23:03:41 GMT) (full text, mbox, link).
Added indication that bug 938438 blocks 936765
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Mon, 21 Oct 2019 23:12:19 GMT) (full text, mbox, link).
Added indication that bug 938438 blocks 937695
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Mon, 21 Oct 2019 23:21:03 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Security Tools <team+pkg-security@tracker.debian.org>:
Bug#938438; Package src:scap-security-guide.
(Fri, 08 May 2020 11:54:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Jeremy Bicha <jeremy@bicha.net>:
Extra info received and forwarded to list. Copy sent to Debian Security Tools <team+pkg-security@tracker.debian.org>.
(Fri, 08 May 2020 11:54:02 GMT) (full text, mbox, link).
Message #20 received at 938438@bugs.debian.org (full text, mbox, reply):
Control: severity -1 serious
I'm bumping the severity since scap-security-guide is no longer in
Testing because some of its Python2 dependencies are no longer built
in Debian.
Maintainers, please indicate whether you are working on a fix or else
this package will be removed from Debian Unstable soon. (You can
always reintroduce the package if you remove the Python2
dependencies.)
Thanks,
Jeremy Bicha
Severity set to 'serious' from 'normal'
Request was from Jeremy Bicha <jeremy@bicha.net>
to 938438-submit@bugs.debian.org.
(Fri, 08 May 2020 11:54:02 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Security Tools <team+pkg-security@tracker.debian.org>:
Bug#938438; Package src:scap-security-guide.
(Mon, 11 May 2020 07:18:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Raphael Hertzog <hertzog@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Security Tools <team+pkg-security@tracker.debian.org>.
(Mon, 11 May 2020 07:18:02 GMT) (full text, mbox, link).
Message #27 received at 938438@bugs.debian.org (full text, mbox, reply):
Hi,
On Fri, 08 May 2020, Jeremy Bicha wrote:
> Maintainers, please indicate whether you are working on a fix or else
> this package will be removed from Debian Unstable soon. (You can
> always reintroduce the package if you remove the Python2
> dependencies.)
I just looked at the upstream source code and it seems to support Python 3
since quite a while.
https://github.com/ComplianceAsCode/content
Philippe, can you take care to prepare an update and get rid of Python 2?
Cheers,
--
⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <hertzog@debian.org>
⣾⠁⢠⠒⠀⣿⡁
⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS
Severity set to 'normal' from 'serious'
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Wed, 08 Jul 2020 07:03:42 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Security Tools <team+pkg-security@tracker.debian.org>:
Bug#938438; Package src:scap-security-guide.
(Wed, 28 Oct 2020 19:03:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Moritz Mühlenhoff <jmm@inutil.org>:
Extra info received and forwarded to list. Copy sent to Debian Security Tools <team+pkg-security@tracker.debian.org>.
(Wed, 28 Oct 2020 19:03:04 GMT) (full text, mbox, link).
Message #34 received at 938438@bugs.debian.org (full text, mbox, reply):
On Mon, May 11, 2020 at 09:06:01AM +0200, Raphael Hertzog wrote:
> Hi,
>
> On Fri, 08 May 2020, Jeremy Bicha wrote:
> > Maintainers, please indicate whether you are working on a fix or else
> > this package will be removed from Debian Unstable soon. (You can
> > always reintroduce the package if you remove the Python2
> > dependencies.)
>
> I just looked at the upstream source code and it seems to support Python 3
> since quite a while.
>
> https://github.com/ComplianceAsCode/content
>
> Philippe, can you take care to prepare an update and get rid of Python 2?
Are you still interested in maintaining scap-security-guide or should
it rather be removed? It's been removed from testing for 9 months now.
Cheers,
Moritz
Added tag(s) bookworm.
Request was from Sebastian Ramacher <sramacher@debian.org>
to control@bugs.debian.org.
(Mon, 16 Aug 2021 07:05:36 GMT) (full text, mbox, link).
Reply sent
to Debian FTP Masters <ftpmaster@ftp-master.debian.org>:
You have taken responsibility.
(Fri, 17 Dec 2021 03:39:06 GMT) (full text, mbox, link).
Notification sent
to Matthias Klose <doko@debian.org>:
Bug acknowledged by developer.
(Fri, 17 Dec 2021 03:39:06 GMT) (full text, mbox, link).
Message #41 received at 938438-done@bugs.debian.org (full text, mbox, reply):
Version: 0.1.39-2+rm
Dear submitter,
as the package scap-security-guide has just been removed from the Debian archive
unstable we hereby close the associated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see https://bugs.debian.org/993368
The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.
Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.
Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Fri, 14 Jan 2022 07:26:09 GMT) (full text, mbox, link).
Bug unarchived.
Request was from Håvard F. Aasen <havard.f.aasen@pfft.no>
to control@bugs.debian.org.
(Mon, 18 Jul 2022 22:42:02 GMT) (full text, mbox, link).
Bug reopened
Request was from Håvard F. Aasen <havard.f.aasen@pfft.no>
to control@bugs.debian.org.
(Mon, 18 Jul 2022 22:42:03 GMT) (full text, mbox, link).
No longer marked as fixed in versions 0.1.39-2+rm.
Request was from Håvard F. Aasen <havard.f.aasen@pfft.no>
to control@bugs.debian.org.
(Mon, 18 Jul 2022 22:42:03 GMT) (full text, mbox, link).
Reply sent
to Bastian Germann <bage@debian.org>:
You have taken responsibility.
(Tue, 26 Jul 2022 22:21:05 GMT) (full text, mbox, link).
Notification sent
to Matthias Klose <doko@debian.org>:
Bug acknowledged by developer.
(Tue, 26 Jul 2022 22:21:05 GMT) (full text, mbox, link).
Message #54 received at 938438-done@bugs.debian.org (full text, mbox, reply):
Version: 0.1.39-2+rm
I guess, Håvard wanted to reintroduce the package but never got to do it.
Reply sent
to havard.f.aasen@pfft.no (Håvard F. Aasen):
You have taken responsibility.
(Fri, 05 Aug 2022 18:03:44 GMT) (full text, mbox, link).
Notification sent
to Matthias Klose <doko@debian.org>:
Bug acknowledged by developer.
(Fri, 05 Aug 2022 18:03:44 GMT) (full text, mbox, link).
Message #59 received at 938438-close@bugs.debian.org (full text, mbox, reply):
Source: scap-security-guide
Source-Version: 0.1.62-1
Done: Håvard F. Aasen <havard.f.aasen@pfft.no>
We believe that the bug you reported is fixed in the latest version of
scap-security-guide, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 938438@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Håvard F. Aasen <havard.f.aasen@pfft.no> (supplier of updated scap-security-guide package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 19 Jul 2022 00:18:12 +0200
Source: scap-security-guide
Binary: ssg-applications ssg-base ssg-debderived ssg-debian ssg-nondebian
Architecture: source all
Version: 0.1.62-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Changed-By: Håvard F. Aasen <havard.f.aasen@pfft.no>
Description:
ssg-applications - SCAP Guides and benchmarks targeting userspace applications
ssg-base - SCAP Security guide base content and documentation
ssg-debderived - SCAP Guides and benchmarks targeting Debian-based OS
ssg-debian - SCAP Guides and benchmarks targeting Debian releases
ssg-nondebian - SCAP Guides and benchmarks targeting other GNU/Linux OS
Closes: 938438
Changes:
scap-security-guide (0.1.62-1) unstable; urgency=medium
.
* Team upload.
* New upstream release.
* Drop all Python 2 dependencies. Closes: #938438
* Patches:
- man_lexgrog_support.patch, rebased and sent upstream.
- Add command-chown-change-separator.patch
- Add fix-typos.patch
* d/watch:
- Update URL, repository moved to new location.
- Bump to version 4.
* Drop d/compat, use debhelper-compat in d/control instead.
* d/control:
- Change from Python 2 to Python 3 build-dependencies.
- Drop python-lxml, and add python3-setuptools.
- Drop ancient X-Python3 field.
- Change libopenscap8 -> openscap-scanner.
- Bump debhelper to 13.
- Update Standards-Version to 4.6.1
- Document Rules-Requires-Root.
- Update binary package description.
- Add myself as uploader.
* d/rules: Specify build directory 'build'.
* Update d/*.install and d/*.docs.
* d/not-installed: Don't install upstream license file.
* d/ssg-base.manpages: Update path.
* Drop d/ssg-base.preinst, no longer needed.
* Set upstream metadata fields: Bug-Database, Bug-Submit, Repository
and Repository-Browse.
* d/copyright:
- Change to secure copyright URI.
- Update source, point to GitHub repository.
- Update main license, upstream project was relicensed to BSD-3-clause.
- Drop three paragraphs for now removed files, add one new paragraph.
- Add myself under Debian paragraph.
* d/*.doc-base: Remove all files, outdated.
* Remove automated way to acquire upstream changelog. This removes patch,
script, python3-requests BD and 'mkrelease' target in d/rules.
* Don't generate bash scripts.
* d/ssg-base.dirs: Add usr/share/scap-security-guide/kickstart and
usr/share/scap-security-guide/tailoring
* wrap-and-sort -at
* Add d/ssg-base.lintian-overrides, override empty directories tag.
Checksums-Sha1:
c708007f6aebd0b3171368692c083bf626ed0570 2474 scap-security-guide_0.1.62-1.dsc
28d21758ab88bce58e41611ecea88af45eb94255 5244135 scap-security-guide_0.1.62.orig.tar.gz
833d63e76393e71dfcf0e3940414c34a02ab5061 10528 scap-security-guide_0.1.62-1.debian.tar.xz
7a0435a70f13c4386579f957119acefa23049deb 9206 scap-security-guide_0.1.62-1_amd64.buildinfo
695791bd4b45fb01dfd51cb566da1aaf0c4e5b9c 237436 ssg-applications_0.1.62-1_all.deb
2867dce43db1ea569f54dc9ce94c2138dcd2fd02 33868 ssg-base_0.1.62-1_all.deb
6acea7f578be4fb89e476702d306d441cd6cf904 2097832 ssg-debderived_0.1.62-1_all.deb
db52f3fb748fd9fa72542aa1cfd5b94ffff59944 1273204 ssg-debian_0.1.62-1_all.deb
1eda00c04f4802193198af3e3fd0a3801ba4385a 33280840 ssg-nondebian_0.1.62-1_all.deb
Checksums-Sha256:
80c029053cf4df30deba9932cf6c4976c1758f7d2079010c144ff2f8c1de3ea7 2474 scap-security-guide_0.1.62-1.dsc
d8e855040dfe23ccce380543a48e3a2a8c172b48e6d9eb292f575b51ea970e0d 5244135 scap-security-guide_0.1.62.orig.tar.gz
8ed735f8fa6610d81e29d9459f8abfceb43be54742a78bb877ad2d0a4342482f 10528 scap-security-guide_0.1.62-1.debian.tar.xz
79ee97ca7a85813b55988cca5ac1b9764045a7763d1885047001d115ac1e7583 9206 scap-security-guide_0.1.62-1_amd64.buildinfo
5cd968f7683d90d57f9b2a120277569db717dd3b239c2980ac05f2789d7f30cc 237436 ssg-applications_0.1.62-1_all.deb
d86a4fc5e59d63c49f731452cfdeb39bf024a46d65278f90d58c00d075c16388 33868 ssg-base_0.1.62-1_all.deb
e80d2ba36a4cb7bbc6b28f3d8e11a14cd3d8a72f0df46794e80d80125dc96f96 2097832 ssg-debderived_0.1.62-1_all.deb
5bcec4bd829d1f99d6998f4b6314be851efb92a818267a7c1d95571301123b12 1273204 ssg-debian_0.1.62-1_all.deb
fa61794247676a995d4d1bc1854f38e405cf8161bbf1e7b29119f29c420f99b8 33280840 ssg-nondebian_0.1.62-1_all.deb
Files:
ac6f77ef64c430de7c387db960b0bb1f 2474 admin optional scap-security-guide_0.1.62-1.dsc
e07e3ad3e50431681ebea6d40d5eefa0 5244135 admin optional scap-security-guide_0.1.62.orig.tar.gz
7677f57b706635ad8f7f54eced2b5164 10528 admin optional scap-security-guide_0.1.62-1.debian.tar.xz
d7daa5f9f53fa254ac03548a1ba1811d 9206 admin optional scap-security-guide_0.1.62-1_amd64.buildinfo
d0368ed8341ffb002347e202d4656ba2 237436 admin optional ssg-applications_0.1.62-1_all.deb
6a2418065a9bfa8e117d6b258801a1ef 33868 admin optional ssg-base_0.1.62-1_all.deb
55d0ffdeb76ae794e108ff4133e1c9a5 2097832 admin optional ssg-debderived_0.1.62-1_all.deb
8319e0ca21ed177bc19c3a9a44f50d42 1273204 admin optional ssg-debian_0.1.62-1_all.deb
0b58a86982db04e169b1f2af2f880340 33280840 admin optional ssg-nondebian_0.1.62-1_all.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmLm64MACgkQu6n6rcz7
Rwesgw/+K0JvkKyXC0raalZ8ONLrLjt+Y0U8pAloHkS9UoAcypau3YwBmZyq/xUh
MCCqobngEQqgQSgOBnUJdUfNvtamm3Oafb0PzMnpzArpzEGVM0H+gJ2lc7HRKiFZ
1IEPFzW566aIJZcnc4L8x1JzzC/qTcD8Efxx+m/MzaWeBWt0o00LcnRvuhum3Rqu
fdVtHnN694i0mT+yO4KzVKA/9HlpxzH1nurHjpmITzITSlbeJVypnAJf3DFMiXTe
Jqnbwjl4391K0jjyvYVi9T4cAf1ylqvdxYcebeiZ0kSjg9iTh+dGK1V8AGr0C/nO
5+OmKNiPb3nwtXFlDH13eAh7Kj2iTVvbnpmQJK9Ga9wHFHOYmbcqWzikU9AiFjGZ
ZefgQlREfO/UdRC/TENY0mQ5FqopJyPY14xBMI7QzGjw8Cnuh59VxTnM5dcwFk0V
EYiQRMaHtUHk2AYKBlMtUKhnnyimvJeAGAhvRsS5keCwK0vFJEqPREqubMQGRt0g
7jhwh7mBaig/g2agRToX/baJ3vIKbiXzNwGhBPrcbZZ0GOu9tUHLVu2r0mCpM3K4
Cs0bQ9xFX5zs6SD3DjwgRY0fwhag08e3SVd6Kydm9D+buHDKnqAjOMjq7mMvESxJ
4ySL4gsopyBUYzWkeVLvQr4wGd6Xb3cnSGYvUGdpAsXspGOjdfU=
=RkON
-----END PGP SIGNATURE-----
Bug reopened
Request was from Paul Wise <pabs@debian.org>
to control@bugs.debian.org.
(Mon, 08 Aug 2022 01:54:12 GMT) (full text, mbox, link).
No longer marked as fixed in versions 0.1.39-2+rm and scap-security-guide/0.1.62-1.
Request was from Paul Wise <pabs@debian.org>
to control@bugs.debian.org.
(Mon, 08 Aug 2022 01:54:13 GMT) (full text, mbox, link).
Marked as fixed in versions scap-security-guide/0.1.62-1.
Request was from Paul Wise <pabs@debian.org>
to control@bugs.debian.org.
(Mon, 08 Aug 2022 01:54:14 GMT) (full text, mbox, link).
Marked Bug as done
Request was from Paul Wise <pabs@debian.org>
to control@bugs.debian.org.
(Mon, 08 Aug 2022 01:54:15 GMT) (full text, mbox, link).
Notification sent
to Matthias Klose <doko@debian.org>:
Bug acknowledged by developer.
(Mon, 08 Aug 2022 01:54:15 GMT) (full text, mbox, link).
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Mon, 19 Sep 2022 07:27:28 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Mar 10 03:47:43 2024;
Machine Name:
bembo
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.