Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.python > #14985

Please fix Debian bug 1032091 "py7zr: CVE-2022-44900"

Path csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From yokota <yokota.hgml@gmail.com>
Newsgroups linux.debian.maint.python
Subject Please fix Debian bug 1032091 "py7zr: CVE-2022-44900"
Date Fri, 24 Mar 2023 01:00:01 +0100
Message-ID <GcD0B-eCT0-1@gated-at.bofh.it> (permalink)
X-Mailbox-Line From debian-python-request@lists.debian.org Thu Mar 23 23:51:12 2023
Old-Return-Path <yokota.hgml@gmail.com>
X-Amavis-Spam-Status No, score=-2.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no
X-Policyd-Weight using cached result; rate: -5.5
X-Gm-Message-State AAQBX9cPHSrQbZKwLzEYtRLEeLSpAE0zGtNzlGSpc6xhiVeUDldTAqrU PoYczp9bvIatB7iRw2Y9oXbWJfdRExVnaArwsbigpfOnDkm61DAg
X-Google-SMTP-Source AKy350bMMgqrvanr5oq5H5Xdp/GyX0hMVK6EJ33l5DqD0dq1LwTWTVckum6BjYljVjYQ95JNgR6ryKNOBh1HEnO3JBg=
X-Received by 2002:ac2:44d9:0:b0:4d5:ca42:e43b with SMTP id d25-20020ac244d9000000b004d5ca42e43bmr166006lfm.4.1679614365713; Thu, 23 Mar 2023 16:32:45 -0700 (PDT)
MIME-Version 1.0
Content-Type text/plain; charset="UTF-8"
X-Mailing-List <debian-python@lists.debian.org> archive/latest/20893
List-ID <debian-python.lists.debian.org>
List-URL <https://lists.debian.org/debian-python/>
List-Archive https://lists.debian.org/msgid-search/CA+0c0dUq9vK+2kO9+=FayPRa=oUKcFkhGXsJgxU1YWrj7iv3ig@mail.gmail.com
Approved robomod@news.nic.it
Lines 16
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Fri, 24 Mar 2023 08:32:34 +0900
X-Original-Message-ID <CA+0c0dUq9vK+2kO9+=FayPRa=oUKcFkhGXsJgxU1YWrj7iv3ig@mail.gmail.com>
Xref csiph.com linux.debian.maint.python:14985

Show key headers only | View raw


Hello, Python maintainers.

Debian "py7zr" package has security issue CVE-2022-44900,
and this issue affects Debian "calibre" package because "calibre" depends
this "py7zr" module.
  https://tracker.debian.org/pkg/py7zr

Please examine Debian bug report 1032091, and fix this issue.
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032091

Debian release system will auto-remove these packages from testing distribution
on Wed 12 Apr 2023.

Thanks,
--
YOKOTA Hiroshi

Back to linux.debian.maint.python | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" yokota <yokota.hgml@gmail.com> - 2023-03-24 01:00 +0100
  Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" Sandro Tosi <morph@debian.org> - 2023-03-24 02:10 +0100
    Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" yokota <yokota.hgml@gmail.com> - 2023-03-25 05:00 +0100

csiph-web