Path: csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From: "Nicolas Dandrimont" <nicolas@dandrimont.eu>
Newsgroups: linux.debian.maint.python
Subject: =?UTF-8?Q?Re:_Please_upload_the_latest_version_of_python-flask-cors_read?=  =?UTF-8?Q?y_in_git?=
Date: Fri, 18 Dec 2020 12:40:02 +0100
Message-ID: <Bnmh4-7Ok-9@gated-at.bofh.it>
References: <BmS9k-650-1@gated-at.bofh.it>
Old-Return-Path: <nicolas@dandrimont.eu>
User-Agent: Cyrus-JMAP/3.3.1-61-gb52c239-fm-20201210.001-gb52c2396
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: quoted-printable
Approved: robomod@news.nic.it
Lines: 38
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
Xref: csiph.com linux.debian.maint.python:13070

On Thu, Dec 17, 2020, at 04:28, Louis-Philippe V=C3=A9ronneau wrote:
> Hello!
>=20
> Bastian Germann asked a month ago for the package python-flask-cors [1=
]
> to be sponsored by someone from the Python Team.
>=20
> Since you put the Team in "Uploaders", I'm writing to you to know if i=
t
> would be possible to make an upload from the latest git commit in Sals=
a.
>
> Bastian fixed a CVE and a FTBFS bug (as well as updated the package) a=
nd
> I did a few tweaks left and right.

Hey,

I think you're being overly conservative here; That package has had a RC=
 bug open for almost a year. It's a security-sensitive package with open=
 security issues; I think it's more than ripe for a team-upload.

[rant about team in Uploaders deleted]
=20
> I believe the package should thus be ready to upload as is, as the onl=
y
> thing missing is "dch -r" :)
>=20
> If you don't have the time to do so, I would be happy to make the uplo=
ad
> for you.

Looks like Stewart doesn't have DM upload rights to this package so a DD=
 would have to sponsor it anyway.

HTH,
--=20
Nicolas Dandrimont