Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.python > #14986

Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900"

Show all headers | View raw

> Debian "py7zr" package has security issue CVE-2022-44900,
> and this issue affects Debian "calibre" package because "calibre" depends
> this "py7zr" module.
>   https://tracker.debian.org/pkg/py7zr
>
> Please examine Debian bug report 1032091, and fix this issue.
>   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032091
>
> Debian release system will auto-remove these packages from testing distribution
> on Wed 12 Apr 2023.

feel free to provide a patch to fix it. upgrading to newer upstream
releases is prohibitive given the increasing amount of
additional/frivolous dependencies upstream decided to rely on.

-- 
Sandro "morph" Tosi
My website: http://sandrotosi.me/
Me at Debian: http://wiki.debian.org/SandroTosi
Twitter: https://twitter.com/sandrotosi

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" yokota <yokota.hgml@gmail.com> - 2023-03-24 01:00 +0100
  Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" Sandro Tosi <morph@debian.org> - 2023-03-24 02:10 +0100
    Re: Please fix Debian bug 1032091 "py7zr: CVE-2022-44900" yokota <yokota.hgml@gmail.com> - 2023-03-25 05:00 +0100

csiph-web