Source: kombu Version: 4 Severity: important Hi!
Kombu uses vine in several places, but the binary packages don't depend on it. #858540 added it as a build-dep to solve an FTBFS, but there's still no binary dependency. Looks like it's missing in setup.py? There's a dependency on python-amqp (which will normally transitively pull in python-vine), but AFAICS that's not safe enough. *Later* versions of python-amqp depend on python-vine, but version 1.4.6 does not. (Found this bug on an upgrade from an older stretch-based system.) -- System Information: Debian Release: 10.6 APT prefers stable-debug APT policy: (500, 'stable-debug'), (500, 'stable'), (500, 'oldstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.19.0-10-amd64 (SMP w/4 CPU cores) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
