Groups > linux.debian.maint.python > #14987

Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900"

Path	csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From	yokota <yokota.hgml@gmail.com>
Newsgroups	linux.debian.maint.python
Subject	Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900"
Date	Sat, 25 Mar 2023 05:00:01 +0100
Message-ID	<Gd3ep-eU3r-1@gated-at.bofh.it> (permalink)
References	<GcD0B-eCT0-1@gated-at.bofh.it> <GcE6l-eDP9-1@gated-at.bofh.it>
X-Mailbox-Line	From debian-python-request@lists.debian.org Sat Mar 25 03:51:11 2023
Old-Return-Path	<yokota.hgml@gmail.com>
X-Amavis-Spam-Status	No, score=-2.179 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, MURPHY_DRUGS_REL8=0.02, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no
X-Policyd-Weight	using cached result; rate: -5.5
X-Gm-Message-State	AAQBX9cJMWhfiPs4VhLU62Of8m03NYlEfYKI7oKh1pLkVztPJG1INjQs Ti0FDSxa/8vn5gJaBnb1sia2LClAUsVQGmrc51Q=
X-Google-SMTP-Source	AKy350b1d6HDnUDn7tcwyj8Ws06up1FBDI5+Ws6FFWx/YIfpl3nfvxdQZUBRDyoAKsYrdavXoHuwKAgpzPU5MNF5GsA=
X-Received	by 2002:a2e:a175:0:b0:2a0:5b04:5fe8 with SMTP id u21-20020a2ea175000000b002a05b045fe8mr1556507ljl.0.1679715314754; Fri, 24 Mar 2023 20:35:14 -0700 (PDT)
MIME-Version	1.0
Content-Type	text/plain; charset="UTF-8"
X-Mailing-List	<debian-python@lists.debian.org> archive/latest/20895
List-ID	<debian-python.lists.debian.org>
List-URL	<https://lists.debian.org/debian-python/>
List-Archive	https://lists.debian.org/msgid-search/CA+0c0dUaE1ASiOjo6K4rg-m3CFpZN8fNgw=OQgjmBJ-AJ1DRZw@mail.gmail.com
Approved	robomod@news.nic.it
Lines	13
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	debian-python@lists.debian.org
X-Original-Date	Sat, 25 Mar 2023 12:35:03 +0900
X-Original-Message-ID	<CA+0c0dUaE1ASiOjo6K4rg-m3CFpZN8fNgw=OQgjmBJ-AJ1DRZw@mail.gmail.com>
X-Original-References	<CA+0c0dUq9vK+2kO9+=FayPRa=oUKcFkhGXsJgxU1YWrj7iv3ig@mail.gmail.com> <CAB4XWXwX-0q=08cXVUEssajhY=9jweckpkT2Y-4FZU_5QtpEEA@mail.gmail.com>
Xref	csiph.com linux.debian.maint.python:14987

Show key headers only | View raw

Hello, Sandro.

> feel free to provide a patch to fix it. upgrading to newer upstream
> releases is prohibitive given the increasing amount of
> additional/frivolous dependencies upstream decided to rely on.

Thanks for your quick response.
I was pushed merge request to Debian salsa repository about this issue.

https://salsa.debian.org/python-team/packages/py7zr/-/merge_requests/2

--
YOKOTA

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" yokota <yokota.hgml@gmail.com> - 2023-03-24 01:00 +0100
  Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" Sandro Tosi <morph@debian.org> - 2023-03-24 02:10 +0100
    Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" yokota <yokota.hgml@gmail.com> - 2023-03-25 05:00 +0100

csiph-web