vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit e384e220b8afe225c979d224cdee3ed0e904be48
Merge: cc7b0fb 34ba6fb
Author: lukpueh <lukas.puehringer@nyu.edu>
Date: Mon Oct 21 12:37:26 2019 +0200
Merge pull request #187 from secure-systems-lab/debian
release as 0.11.3-2
commit 34ba6fb405ed7404defafa39b96e0d36c4823ca9
Author: Holger Levsen <holger@layer-acht.org>
Date: Sat Oct 19 01:28:53 2019 +0200
release as 0.11.3-2
Signed-off-by: Holger Levsen <holger@layer-acht.org>
commit cc7b0fbebe2e9338ebd3135ba1196c44f5242b4f
Merge: 586c6b5 3cec858
Author: lukpueh <lukas.puehringer@nyu.edu>
Date: Tue Oct 15 16:20:57 2019 +0200
Merge pull request #186 from secure-systems-lab/fix-duplicate-streams
Fix a race condition in `process.run_duplicate_streams`
commit 3cec8584f597ab07f734413bc275ef6a7d24a673
Author: Lukas Puehringer <lukas.puehringer@nyu.edu>
Date: Tue Oct 1 16:26:03 2019 +0200
Read fixed chunked size in `run_duplicate_streams`
This fixes a potential subversion of the timeout parameter
in `process.run_duplicate_streams`.
That is, if the child process writes to much and too fast to its
standard streams, the parent process will take too long (or even
indefinitely) to read and then write the contents to its own
standard streams, before it e.g. checks whether the process should
timeout.
This change adds a size parameter to the relevant read functions
to prevent above.
commit 5d5144011e673e43d847d85a5b39372e1b7704e6
Author: Lukas Puehringer <lukas.puehringer@nyu.edu>
Date: Tue Oct 1 11:28:39 2019 +0200
Add note about buffered outputs to process module
commit 1c25fed473c669beb8acd1a7ad3da935995ba0b5
Author: Lukas Puehringer <lukas.puehringer@nyu.edu>
Date: Tue Oct 1 11:18:53 2019 +0200
Fix race condition in process module
This commit fixes a race condition in a standard stream duplicating
loop in `process.run_duplicate_streams`, where the subprocess would
write to its standard streams after the last read in the parent
process, and then terminate before another iteration would be
started, and therefor leaving the last parts of the streams unread.
This fix includes a last post-loop read, which can only take place
after the process has terminated, and no longer writes to its
streams.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/python-securesystemslib.png){kind=link}