Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: yokota Newsgroups: linux.debian.maint.python Subject: Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" Date: Sat, 25 Mar 2023 05:00:01 +0100 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Sat Mar 25 03:51:11 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-2.179 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, MURPHY_DRUGS_REL8=0.02, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Gm-Message-State: AAQBX9cJMWhfiPs4VhLU62Of8m03NYlEfYKI7oKh1pLkVztPJG1INjQs Ti0FDSxa/8vn5gJaBnb1sia2LClAUsVQGmrc51Q= X-Google-SMTP-Source: AKy350b1d6HDnUDn7tcwyj8Ws06up1FBDI5+Ws6FFWx/YIfpl3nfvxdQZUBRDyoAKsYrdavXoHuwKAgpzPU5MNF5GsA= X-Received: by 2002:a2e:a175:0:b0:2a0:5b04:5fe8 with SMTP id u21-20020a2ea175000000b002a05b045fe8mr1556507ljl.0.1679715314754; Fri, 24 Mar 2023 20:35:14 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" X-Mailing-List: archive/latest/20895 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CA+0c0dUaE1ASiOjo6K4rg-m3CFpZN8fNgw=OQgjmBJ-AJ1DRZw@mail.gmail.com Approved: robomod@news.nic.it Lines: 13 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-python@lists.debian.org X-Original-Date: Sat, 25 Mar 2023 12:35:03 +0900 X-Original-Message-ID: X-Original-References: Xref: csiph.com linux.debian.maint.python:14987 Hello, Sandro. > feel free to provide a patch to fix it. upgrading to newer upstream > releases is prohibitive given the increasing amount of > additional/frivolous dependencies upstream decided to rely on. Thanks for your quick response. I was pushed merge request to Debian salsa repository about this issue. https://salsa.debian.org/python-team/packages/py7zr/-/merge_requests/2 -- YOKOTA