Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: yokota Newsgroups: linux.debian.maint.python Subject: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" Date: Fri, 24 Mar 2023 01:00:01 +0100 Message-ID: X-Mailbox-Line: From debian-python-request@lists.debian.org Thu Mar 23 23:51:12 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-2.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Gm-Message-State: AAQBX9cPHSrQbZKwLzEYtRLEeLSpAE0zGtNzlGSpc6xhiVeUDldTAqrU PoYczp9bvIatB7iRw2Y9oXbWJfdRExVnaArwsbigpfOnDkm61DAg X-Google-SMTP-Source: AKy350bMMgqrvanr5oq5H5Xdp/GyX0hMVK6EJ33l5DqD0dq1LwTWTVckum6BjYljVjYQ95JNgR6ryKNOBh1HEnO3JBg= X-Received: by 2002:ac2:44d9:0:b0:4d5:ca42:e43b with SMTP id d25-20020ac244d9000000b004d5ca42e43bmr166006lfm.4.1679614365713; Thu, 23 Mar 2023 16:32:45 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" X-Mailing-List: archive/latest/20893 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CA+0c0dUq9vK+2kO9+=FayPRa=oUKcFkhGXsJgxU1YWrj7iv3ig@mail.gmail.com Approved: robomod@news.nic.it Lines: 16 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Fri, 24 Mar 2023 08:32:34 +0900 X-Original-Message-ID: Xref: csiph.com linux.debian.maint.python:14985 Hello, Python maintainers. Debian "py7zr" package has security issue CVE-2022-44900, and this issue affects Debian "calibre" package because "calibre" depends this "py7zr" module. https://tracker.debian.org/pkg/py7zr Please examine Debian bug report 1032091, and fix this issue. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032091 Debian release system will auto-remove these packages from testing distribution on Wed 12 Apr 2023. Thanks, -- YOKOTA Hiroshi