Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.python > #13881
| Path | csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!bofh.it!news.nic.it!robomod |
|---|---|
| From | Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> |
| Newsgroups | linux.debian.security, linux.debian.maint.python |
| Subject | Re: Considering letting python-pip use vendored dependencies |
| Date | Sun, 16 Jan 2022 16:20:01 +0100 |
| Message-ID | <DGfu1-41m-1@gated-at.bofh.it> (permalink) |
| References | <CXMFs-7iS-1@gated-at.bofh.it> <DGfkl-3Wz-5@gated-at.bofh.it> |
| X-Original-To | debian-security <debian-security@lists.debian.org>, team@security.debian.org, debian-python <debian-python@lists.debian.org>, Carl Chenet <chaica@debian.org>, Scott Kitterman <scott@kitterman.com> |
| X-Mailbox-Line | From debian-security-request@lists.debian.org Sun Jan 16 15:15:35 2022 |
| Old-Return-Path | <ikaka.robert.online@gmail.com> |
| X-Amavis-Spam-Status | No, score=-5.179 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=2, LDO_WHITELIST=-5, MD5_SHA1_SUM=-1, MURPHY_DRUGS_REL8=0.02, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no |
| X-Policyd-Weight | using cached result; rate: -5.5 |
| X-Gm-Message-State | AOAM531ZrZyWcD8cyYWtMzZdedLo9kM8sZoXr6PfOBhTFJRLmdzaRwAk mNx5kp8care8DT2wa6zVBPuVDna0n8IiWB5AjYLayRzDZLtJ69dB |
| X-Google-SMTP-Source | ABdhPJykQxJ3rC24keS6/eOSwPco7OUkhwiExb+GHG7MvzyhGj7Lmg5WnIsmqUiLdRuoqc21mOG4B+5MBIuaFLI+79A= |
| X-Received | by 2002:a05:6a00:21c2:b0:4bc:fb2d:4b6f with SMTP id t2-20020a056a0021c200b004bcfb2d4b6fmr17107351pfj.62.1642346117300; Sun, 16 Jan 2022 07:15:17 -0800 (PST) |
| MIME-Version | 1.0 |
| Content-Type | multipart/alternative; boundary="000000000000eb87dd05d5b480c5" |
| X-Mailing-List | <debian-security@lists.debian.org> archive/latest/29141 |
| List-ID | <debian-security.lists.debian.org> |
| List-URL | <https://lists.debian.org/debian-security/> |
| List-Archive | https://lists.debian.org/msgid-search/CAPg0vjpQ8Q_q4w5CWFPkqzS-CiJuUOiN3VdrtdEuKHLqw_T7NA@mail.gmail.com |
| Approved | robomod@news.nic.it |
| Lines | 72 |
| Organization | linux.* mail to news gateway |
| Sender | robomod@news.nic.it |
| X-Original-Date | Sun, 16 Jan 2022 18:15:06 +0300 |
| X-Original-Message-ID | <CAPg0vjpQ8Q_q4w5CWFPkqzS-CiJuUOiN3VdrtdEuKHLqw_T7NA@mail.gmail.com> |
| X-Original-References | <20210915233214.6ys6kpsksh7dkipj@satie.tumbleweed.org.za> <20220116150639.2dhuybxl77tewhhf@satie.tumbleweed.org.za> |
| Xref | csiph.com linux.debian.security:5997 linux.debian.maint.python:13881 |
Cross-posted to 2 groups.
Show key headers only | View raw
[Multipart message — attachments visible in raw view] - view raw
https://chng.it/jJvMChbdsJ Support pls вс, 16 янв. 2022 г., 18:07 <stefanor@debian.org>: > Hi debian-security (2021.09.15_23:32:14_+0000) > > As mentioned in debian-devel recently [1], at the DebConf 21 Debian > > Python BoF [2] we discussed the idea of reverting our unbundling patches > > to python-pip. The group consensus was that it wasn't worth the effort > > to maintain these patches. > > FYI, this is now done, as of pip 21.3.1+dfsg-1. > > Updated embedded-code-copies: > > https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64edb42f3ba4e9c79aefea7338b195f7975bfe70 > > SR > > -- > Stefano Rivera > http://tumbleweed.org.za/ > +1 415 683 3272 > >
Back to linux.debian.maint.python | Previous | Next — Previous in thread | Find similar | Unroll thread
Considering letting python-pip use vendored dependencies Stefano Rivera <stefanor@debian.org> - 2021-09-16 01:50 +0200
Re: Considering letting python-pip use vendored dependencies stefanor@debian.org - 2022-01-16 16:10 +0100
Re: Considering letting python-pip use vendored dependencies Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> - 2022-01-16 16:20 +0100
csiph-web