[diffoscope] 01/02: d/rules: recommends the defusedxml python package, to avoid using the python3's standard xml library and its security holes

[Mattia Rizzolo]

This is an automated email from the git hooks/post-receive script.

mattia pushed a commit to branch master
in repository diffoscope.

commit 76f9cad3e8569fc98e4564cb4c79477bc54eee7e
Author: Mattia Rizzolo <mattia at debian.org>
Date:   Sun Jul 30 23:43:43 2017 +0200

    d/rules: recommends the defusedxml python package, to avoid using the python3's standard xml library and its security holes
    
    Signed-off-by: Mattia Rizzolo <mattia at debian.org>
---
 debian/control | 1 -
 debian/rules   | 2 ++
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/debian/control b/debian/control
index 6cd947e..ad93b13 100644
--- a/debian/control
+++ b/debian/control
@@ -78,7 +78,6 @@ Breaks:
 Replaces:
  debbindiff (<< 29),
 Depends:
- python3-distro,
  python3-pkg-resources,
  ${misc:Depends},
  ${python3:Depends},
diff --git a/debian/rules b/debian/rules
index 0d88596..4b15cd5 100755
--- a/debian/rules
+++ b/debian/rules
@@ -54,6 +54,8 @@ override_dh_installman: $(MANPAGES)
 
 override_dh_python3:
 	dh_python3 -p diffoscope \
+		--depends=distro \
+		--recommends=defusedxml \
 		--recommends=python-debian \
 		--recommends=rpm-python \
 		--recommends=tlsh \

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/diffoscope.git