- Package:
- src:python-django
- Source:
- src:python-django
- Submitter:
- Santiago Vila
- Date:
- 2026-05-28 21:05:03 UTC
- Severity:
- normal
- Tags:
Dear maintainer: During a rebuild of all packages in trixie, this package failed to build. [ Note: The bug is marked as fixed with the version in forky/sid, but packages in bookworm and trixie must still build in bookworm and trixie ]. Below you will find the last part of the build log (probably the most relevant part, but not necessarily). If required, the full build log is available here: https://people.debian.org/~sanvila/build-logs/trixie/ About the archive rebuild: The build was made on virtual machines from AWS, using sbuild and a reduced chroot with only build-essential packages. If you cannot reproduce the bug please contact me privately, as I am willing to provide ssh access to a virtual machine where the bug is fully reproducible. If this is really a bug in one of the build-depends, please use reassign and add an affects on src:python-django, so that this is still visible in the BTS web page for this package. Thanks. -------------------------------------------------------------------------------- [...] ====================================================================== FAIL: test_strip_tags (utils_tests.test_html.TestUtilsHtml.t [too-long-redacted] &&&&&&&&&&&&&&&&&&&&&&&&&&&&D') ---------------------------------------------------------------------- Traceback (most recent call last): File "/usr/lib/python3.13/unittest/case.py", line 58, in testPartExecutor yield File "/usr/lib/python3.13/unittest/case.py", line 556, in subTest yield File "/<<PKGBUILDDIR>>/tests/utils_tests/test_html.py", line 171, in test_strip_tags self.check_output(strip_tags, value, output) ^^^^^^^ File "/<<PKGBUILDDIR>>/tests/utils_tests/test_html.py", line 34, in check_output self.assertEqual(function(value), output) ^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/unittest/case.py", line 907, in assertEqual assertion_func(first, second, msg=msg) ^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/unittest/case.py", line 1273, in assertMultiLineEqual self.fail(self._formatMessage(msg, standardMsg)) ^^^^^^^^^^^ File "/usr/lib/python3.13/unittest/case.py", line 732, in fail raise self.failureException(msg) ^^^^^^^^^^^^^^^ AssertionError: '>' != '><!&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&[15958 chars]&&&D' Diff is 16012 characters long. Set self.maxDiff to None to see it. ====================================================================== FAIL: test_strip_tags (utils_tests.test_html.TestUtilsHtml.t [too-long-redacted] <a<a<a<a<a<a<a<a<a<a<a<a<a<aa') ---------------------------------------------------------------------- Traceback (most recent call last): File "/usr/lib/python3.13/unittest/case.py", line 58, in testPartExecutor yield File "/usr/lib/python3.13/unittest/case.py", line 556, in subTest yield File "/<<PKGBUILDDIR>>/tests/utils_tests/test_html.py", line 171, in test_strip_tags self.check_output(strip_tags, value, output) ^^^^^^^ File "/<<PKGBUILDDIR>>/tests/utils_tests/test_html.py", line 34, in check_output self.assertEqual(function(value), output) ^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/unittest/case.py", line 907, in assertEqual assertion_func(first, second, msg=msg) ^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/unittest/case.py", line 1273, in assertMultiLineEqual self.fail(self._formatMessage(msg, standardMsg)) ^^^^^^^^^^^ File "/usr/lib/python3.13/unittest/case.py", line 732, in fail raise self.failureException(msg) ^^^^^^^^^^^^^^^ AssertionError: '>' != '><a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<[956 chars]a<aa' Diff is 1010 characters long. Set self.maxDiff to None to see it.---------------------------------------------------------------------- Ran 16382 tests in 217.244s FAILED (failures=2, skipped=1288, expected failures=5) Destroying test database for alias 'default' ('file:memorydb_default?mode=memory&cache=shared')... Destroying test database for alias 'default' ('file:memorydb_default?mode=memory&cache=shared')... Destroying test database for alias 'default' ('file:memorydb_default?mode=memory&cache=shared')... Destroying test database for alias 'other' ('file:memorydb_other?mode=memory&cache=shared')... Destroying test database for alias 'other' ('file:memorydb_other?mode=memory&cache=shared')... Destroying test database for alias 'other' ('file:memorydb_other?mode=memory&cache=shared')... make[1]: *** [debian/rules:23: override_dh_auto_test] Error 1 make[1]: Leaving directory '/<<PKGBUILDDIR>>' make: *** [debian/rules:9: binary] Error 2 dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2 --------------------------------------------------------------------------------
Santiago Vila wrote: Bugs for this filed as #1137723 and #1137724. Thanks! Regards,
We believe that the bug you reported is fixed in the latest version of
python-django, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1137039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated python-django package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 26 May 2026 14:35:49 -0700
Source: python-django
Built-For-Profiles: nocheck
Architecture: source
Version: 3:4.2.28-0+deb13u2
Distribution: stable-proposed-updates
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1137039
Changes:
python-django (3:4.2.28-0+deb13u2) stable-proposed-updates; urgency=medium
.
* The fix for CVE-2025-6069 in the python3.13 source package (released
as part of a suite of updates in 3.13.5-2+deb13u2) modified Python's
html.parser.HTMLParser class in such a way that changed the behaviour of
Django's strip_tags() method. As a result of this change, we update the
testsuite here for the newly expected results in order to prevent a build
failure. (Closes: #1137039)
Checksums-Sha1:
3afd0db8fe37db55244a517f65940333f968fcb9 2822 python-django_4.2.28-0+deb13u2.dsc
474cd0b22f4280c18720a6e8ecab210a55935c90 35340 python-django_4.2.28-0+deb13u2.debian.tar.xz
467222fd56d7b8fcc1438e39d1bb712a9c8f844e 8301 python-django_4.2.28-0+deb13u2_amd64.buildinfo
Checksums-Sha256:
2c55c71dc74f5db81086b88bae3c42a1a9ae806d0c7a993371f69f8c774e6839 2822 python-django_4.2.28-0+deb13u2.dsc
21aac447a293b479af00d48e27018a19b3dd186680c2fd662be622c04c9858d2 35340 python-django_4.2.28-0+deb13u2.debian.tar.xz
02b31f73ea5bb4f707a247a1327ac1714593e62b527802c829c5fdcd96e54e5d 8301 python-django_4.2.28-0+deb13u2_amd64.buildinfo
Files:
5f67a4cf944b07763e49b98e9b615ab8 2822 python optional python-django_4.2.28-0+deb13u2.dsc
4f291967fe01552b6ca1908f45d59f4e 35340 python optional python-django_4.2.28-0+deb13u2.debian.tar.xz
f6772c7ff641d7acf8cbded7fe97a622 8301 python optional python-django_4.2.28-0+deb13u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmoYePsACgkQHpU+J9Qx
HliWAg//QqG8TVt0yFRBP/C9TqyFirnXad8fTc6mvURNRdII3WQcLEHzX2WSCUeW
XWJczAOSrcEyRZfY1i+WHMU2QWXlkCjUKBIi8Ep2yY/5sGrdEeq0O9D+DXz1x3NG
FDyal8dDkdSw9hBR/2xfoJqyvYsADODlc4nb6O0ABHqXyjuP81cbeiZLCfsFqDhh
d6kQDG3U+Id1JBfOxZJLMwu6IZWpPhd1VrMj+Ji5K3LJ6n5bvP2yAtjWfNzZyf/9
uMdjnSvNMBeKl/XI2adliLadE2/3Vp3hyLECeE0K6oDpw8I43hcMFCFGLNUFIDdC
+tyndGqcIqEoZnYMdFeV46mLhy9LBaQgAj0GDHuBy/fonCQYwt3hZQizs3P3iHsQ
0Byvp0kcD9B4IFXn3mbVs6ui3hUzAk8E+3VEaKHIU8co3RoS3zFY7G7bCSLUeTWW
bh7kKedZ/kkOfhqqjD+tAwvRTXNAtMjoWe44Y89sVOEk9WoDnPqoik3SVytMK905
0gL2qcs8LdHN1JUhp9ynoqvw0SCrWaGqJUzkf1+ZbeDaJGlwgtIYRdZwZXzlft4J
MDZHmJ10f76F4MSfXlgGS+9UhwYqUXH2w18PBhdyHQd7BVm6PHwlIz4ttF5gBLsr
SHVkfgTdxb/U7jOupkybrWSaoQBMn1R8R6QbU39Xb6xqmAQ4GeM=
=wfMJ
-----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of
python-django, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1137039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated python-django package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 26 May 2026 14:32:47 -0700
Source: python-django
Built-For-Profiles: nocheck
Architecture: source
Version: 3:3.2.25-0+deb12u3
Distribution: oldstable-proposed-updates
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1137039
Changes:
python-django (3:3.2.25-0+deb12u3) oldstable-proposed-updates; urgency=medium
.
* The fix for CVE-2025-6069 in the python3.11 source package (released
as part of a suite of updates in 3.11.2-6+deb12u7) modified the
html.parser.HTMLParser class in such a way that changed the behaviour of
Django's strip_tags() method. As a result of this change, we update the
testsuite here for the newly expected results in order to prevent a build
failure. (Closes: #1137039)
Checksums-Sha1:
54571e0bb8a13519f840b9c8961d731d621bd44b 2839 python-django_3.2.25-0+deb12u3.dsc
33373f1c5c92ed85c5082909108e03e43ab7836a 66280 python-django_3.2.25-0+deb12u3.debian.tar.xz
9a74ce8647e005521ace818fba6a0537e2e8ce4c 8591 python-django_3.2.25-0+deb12u3_amd64.buildinfo
Checksums-Sha256:
8e6d101f58a4ae68d19db68f653b4e8238a52d28aca03b65878e50560d09c45e 2839 python-django_3.2.25-0+deb12u3.dsc
33ae8f9d57c639150a4ca63fde8594d7accf691ea250ff49b6ca2f9e606d630d 66280 python-django_3.2.25-0+deb12u3.debian.tar.xz
6955f3c465920237d00045e37cad9173ca1a7bce8470f2ad5fb05f9adecb72b1 8591 python-django_3.2.25-0+deb12u3_amd64.buildinfo
Files:
b0c026174ee0ec618a7c1ce19ed6242b 2839 python optional python-django_3.2.25-0+deb12u3.dsc
2e4762012ce57e57486ad98e6577e0be 66280 python optional python-django_3.2.25-0+deb12u3.debian.tar.xz
9fe54cce86952936f8aea720df27595c 8591 python optional python-django_3.2.25-0+deb12u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=aBVg
-----END PGP SIGNATURE-----