GNU bug report logs - #61172
[PATCH] gnu: python-pillow: Update to 9.3.0 [fixes CVE-2022-45199].

Previous Next

Package: guix-patches;

Reported by: Nicolas Graves <ngraves <at> ngraves.fr>

Date: Mon, 30 Jan 2023 13:49:01 UTC

Severity: normal

Tags: patch

Done: Lars-Dominik Braun <lars <at> 6xq.net>

Bug is archived. No further changes may be made.

Full log

Message #11 received at 61172 <at> debbugs.gnu.org (full text, mbox):

From: "Leo Famulari" <leo <at> famulari.name>
To: "Lars-Dominik Braun" <lars <at> 6xq.net>, "Nicolas Graves" <ngraves <at> ngraves.fr>
Cc: 61172 <at> debbugs.gnu.org
Subject: Re: [bug#61172] [Nicolas Graves via Guix-patches via] [bug#61172]
 [PATCH] gnu: python-pillow: Update to 9.3.0 [fixes CVE-2022-45199].
Date: Sun, 05 Feb 2023 12:53:53 +0100

On Sat, Feb 4, 2023, at 16:57, Lars-Dominik Braun wrote:
> Hi,
>
> it’s nothing we can merge to master unfortunately, because it causes
> quite a few number of rebuilds. Do you know whether Python packages
> are graftable? I never tried that.


Unless something has changed recently (possible, I haven't paid close attention), yes, it's possible to graft Python packages.

Additionally, we can attempt a rapid rebuilding of pillow's dependents, perhaps along with a few other "ungrafting" changes. We are aiming to do the graft->ungraft cycles more quickly than previously.
This bug report was last modified 2 years and 106 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.