Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.python > #13880
| Path | csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod |
|---|---|
| From | stefanor@debian.org |
| Newsgroups | linux.debian.security, linux.debian.maint.python |
| Subject | Re: Considering letting python-pip use vendored dependencies |
| Date | Sun, 16 Jan 2022 16:10:03 +0100 |
| Message-ID | <DGfkl-3Wz-5@gated-at.bofh.it> (permalink) |
| References | <CXMFs-7iS-1@gated-at.bofh.it> |
| X-Original-To | debian-security <debian-security@lists.debian.org>, team@security.debian.org, debian-python <debian-python@lists.debian.org>, Carl Chenet <chaica@debian.org>, Scott Kitterman <scott@kitterman.com> |
| X-Mailbox-Line | From debian-security-request@lists.debian.org Sun Jan 16 15:06:57 2022 |
| Old-Return-Path | <stefano@rivera.za.net> |
| X-Amavis-Spam-Status | No, score=-6.88 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, DKIMWL_WL_HIGH=-0.049, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, LDO_WHITELIST=-5, MD5_SHA1_SUM=-1, MURPHY_DRUGS_REL8=0.02] autolearn=ham autolearn_force=no |
| X-Policyd-Weight | using cached result; rate: -4.6 |
| Mail-Followup-To | debian-security <debian-security@lists.debian.org>, team@security.debian.org, debian-python <debian-python@lists.debian.org>, Carl Chenet <chaica@debian.org>, Scott Kitterman <scott@kitterman.com> |
| X-Gpg-Public-Key | http://www.rivera.za.net/stefano.gpg |
| MIME-Version | 1.0 |
| Content-Type | text/plain; charset=utf-8 |
| Content-Disposition | inline |
| User-Agent | NeoMutt/20201127 |
| X-Mailing-List | <debian-security@lists.debian.org> archive/latest/29140 |
| List-ID | <debian-security.lists.debian.org> |
| List-URL | <https://lists.debian.org/debian-security/> |
| List-Archive | https://lists.debian.org/msgid-search/20220116150639.2dhuybxl77tewhhf@satie.tumbleweed.org.za |
| Approved | robomod@news.nic.it |
| Lines | 17 |
| Organization | linux.* mail to news gateway |
| Sender | robomod@news.nic.it |
| X-Original-Date | Sun, 16 Jan 2022 15:06:39 +0000 |
| X-Original-Message-ID | <20220116150639.2dhuybxl77tewhhf@satie.tumbleweed.org.za> |
| X-Original-References | <20210915233214.6ys6kpsksh7dkipj@satie.tumbleweed.org.za> |
| Xref | csiph.com linux.debian.security:5996 linux.debian.maint.python:13880 |
Cross-posted to 2 groups.
Show key headers only | View raw
Hi debian-security (2021.09.15_23:32:14_+0000) > As mentioned in debian-devel recently [1], at the DebConf 21 Debian > Python BoF [2] we discussed the idea of reverting our unbundling patches > to python-pip. The group consensus was that it wasn't worth the effort > to maintain these patches. FYI, this is now done, as of pip 21.3.1+dfsg-1. Updated embedded-code-copies: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64edb42f3ba4e9c79aefea7338b195f7975bfe70 SR -- Stefano Rivera http://tumbleweed.org.za/ +1 415 683 3272
Back to linux.debian.maint.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Considering letting python-pip use vendored dependencies Stefano Rivera <stefanor@debian.org> - 2021-09-16 01:50 +0200
Re: Considering letting python-pip use vendored dependencies stefanor@debian.org - 2022-01-16 16:10 +0100
Re: Considering letting python-pip use vendored dependencies Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> - 2022-01-16 16:20 +0100
csiph-web