Path: csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!bofh.it!news.nic.it!robomod
From: Robert Ricardo Ikaka <ikaka.robert.online@gmail.com>
Newsgroups: linux.debian.security,linux.debian.maint.python
Subject: Re: Considering letting python-pip use vendored dependencies
Date: Sun, 16 Jan 2022 16:20:01 +0100
Message-ID: <DGfu1-41m-1@gated-at.bofh.it>
References: <CXMFs-7iS-1@gated-at.bofh.it> <DGfkl-3Wz-5@gated-at.bofh.it>
X-Original-To: debian-security <debian-security@lists.debian.org>, team@security.debian.org, debian-python <debian-python@lists.debian.org>, Carl Chenet <chaica@debian.org>, Scott Kitterman <scott@kitterman.com>
X-Mailbox-Line: From debian-security-request@lists.debian.org  Sun Jan 16 15:15:35 2022
Old-Return-Path: <ikaka.robert.online@gmail.com>
X-Amavis-Spam-Status: No, score=-5.179 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=2, LDO_WHITELIST=-5, MD5_SHA1_SUM=-1, MURPHY_DRUGS_REL8=0.02, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no
X-Policyd-Weight: using cached result; rate: -5.5
X-Gm-Message-State: AOAM531ZrZyWcD8cyYWtMzZdedLo9kM8sZoXr6PfOBhTFJRLmdzaRwAk mNx5kp8care8DT2wa6zVBPuVDna0n8IiWB5AjYLayRzDZLtJ69dB
X-Google-SMTP-Source: ABdhPJykQxJ3rC24keS6/eOSwPco7OUkhwiExb+GHG7MvzyhGj7Lmg5WnIsmqUiLdRuoqc21mOG4B+5MBIuaFLI+79A=
X-Received: by 2002:a05:6a00:21c2:b0:4bc:fb2d:4b6f with SMTP id t2-20020a056a0021c200b004bcfb2d4b6fmr17107351pfj.62.1642346117300; Sun, 16 Jan 2022 07:15:17 -0800 (PST)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="000000000000eb87dd05d5b480c5"
X-Mailing-List: <debian-security@lists.debian.org> archive/latest/29141
List-ID: <debian-security.lists.debian.org>
List-URL: <https://lists.debian.org/debian-security/>
List-Archive: https://lists.debian.org/msgid-search/CAPg0vjpQ8Q_q4w5CWFPkqzS-CiJuUOiN3VdrtdEuKHLqw_T7NA@mail.gmail.com
Approved: robomod@news.nic.it
Lines: 72
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
X-Original-Date: Sun, 16 Jan 2022 18:15:06 +0300
X-Original-Message-ID: <CAPg0vjpQ8Q_q4w5CWFPkqzS-CiJuUOiN3VdrtdEuKHLqw_T7NA@mail.gmail.com>
X-Original-References: <20210915233214.6ys6kpsksh7dkipj@satie.tumbleweed.org.za> <20220116150639.2dhuybxl77tewhhf@satie.tumbleweed.org.za>
Xref: csiph.com linux.debian.security:5997 linux.debian.maint.python:13881

--000000000000eb87dd05d5b480c5
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

https://chng.it/jJvMChbdsJ

Support pls

=D0=B2=D1=81, 16 =D1=8F=D0=BD=D0=B2. 2022 =D0=B3., 18:07 <stefanor@debian.o=
rg>:

> Hi debian-security (2021.09.15_23:32:14_+0000)
> > As mentioned in debian-devel recently [1], at the DebConf 21 Debian
> > Python BoF [2] we discussed the idea of reverting our unbundling patche=
s
> > to python-pip. The group consensus was that it wasn't worth the effort
> > to maintain these patches.
>
> FYI, this is now done, as of pip 21.3.1+dfsg-1.
>
> Updated embedded-code-copies:
>
> https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/=
64edb42f3ba4e9c79aefea7338b195f7975bfe70
>
> SR
>
> --
> Stefano Rivera
>   http://tumbleweed.org.za/
>   +1 415 683 3272
>
>

--000000000000eb87dd05d5b480c5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><a href=3D"https://chng.it/jJvMChbdsJ">https://chng.it/jJ=
vMChbdsJ</a><div dir=3D"auto"><br></div><div dir=3D"auto">Support pls</div>=
</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">=
=D0=B2=D1=81, 16 =D1=8F=D0=BD=D0=B2. 2022 =D0=B3., 18:07  &lt;<a href=3D"ma=
ilto:stefanor@debian.org">stefanor@debian.org</a>&gt;:<br></div><blockquote=
 class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc soli=
d;padding-left:1ex">Hi debian-security (2021.09.15_23:32:14_+0000)<br>
&gt; As mentioned in debian-devel recently [1], at the DebConf 21 Debian<br=
>
&gt; Python BoF [2] we discussed the idea of reverting our unbundling patch=
es<br>
&gt; to python-pip. The group consensus was that it wasn&#39;t worth the ef=
fort<br>
&gt; to maintain these patches.<br>
<br>
FYI, this is now done, as of pip 21.3.1+dfsg-1.<br>
<br>
Updated embedded-code-copies:<br>
<a href=3D"https://salsa.debian.org/security-tracker-team/security-tracker/=
-/commit/64edb42f3ba4e9c79aefea7338b195f7975bfe70" rel=3D"noreferrer norefe=
rrer" target=3D"_blank">https://salsa.debian.org/security-tracker-team/secu=
rity-tracker/-/commit/64edb42f3ba4e9c79aefea7338b195f7975bfe70</a><br>
<br>
SR<br>
<br>
-- <br>
Stefano Rivera<br>
=C2=A0 <a href=3D"http://tumbleweed.org.za/" rel=3D"noreferrer noreferrer" =
target=3D"_blank">http://tumbleweed.org.za/</a><br>
=C2=A0 +1 415 683 3272<br>
<br>
</blockquote></div>

--000000000000eb87dd05d5b480c5--