python self-tests hanging?

[Havard Eidnes <he%NetBSD.org@localhost>]

Hi,

I noticed https://nvd.nist.gov/vuln/detail/CVE-2018-1000030
against python 2.7.14, which is supposedly fixed by 2.7.15 which
is now out.

I have an update of the python27 package lined up, but thought I
would make sure this doesn't introduce any regressions, so wanted
to run the self-tests.  However, it appears that both versions'
self-tests end up hanging; the last in my log is:

0:06:28 load avg: 0.65 [298/403/7] test_shlex
0:06:28 load avg: 0.65 [299/403/7] test_shutil
0:06:29 load avg: 0.65 [300/403/7] test_signal

and there it sits until it's killed.

Anyone have any ideas or (better yet) fixes?

Should I just barge ahead and update it anyway?

Regards,

- Håvard