Processed: Re: Bug#1081014: Should python3-zipp be dropped in trixie?

2024-09-09 Thread Debian Bug Tracking System
Processing control commands: > severity -1 normal Bug #1081014 [python3-zipp] Should python3-zipp be dropped in trixie? Severity set to 'normal' from 'serious' > tags -1 wontfix Bug #1081014 [python3-zipp] Should python3-zipp be dropped in trixie? Added tag(s) wontfix. -- 1081014: https://bugs.d

Bug#1081014: Should python3-zipp be dropped in trixie?

2024-09-09 Thread Colin Watson
Control: severity -1 normal Control: tags -1 wontfix On Fri, Sep 06, 2024 at 11:39:44PM +0300, Adrian Bunk wrote: > Looking at CVE-2024-5569 and the potential of future CVEs, > I wonder whether there is any reason why reverse dependencies > still need this package or whether they could use the ver

Bug#1081014: Should python3-zipp be dropped in trixie?

2024-09-06 Thread Adrian Bunk
Package: python3-zipp Version: 3.20.1-1 Severity: serious Looking at CVE-2024-5569 and the potential of future CVEs, I wonder whether there is any reason why reverse dependencies still need this package or whether they could use the version vendored in src:python3.* If there is a reason, feel fre