Debian Package Tracker
Register | Log in
Subscribe

python-zipp

pathlib-compatible Zipfile object wrapper - Python 3.x

Choose email to subscribe with

general
  • source: python-zipp (main)
  • version: 3.21.0-1
  • maintainer: Debian Python Team (DMD)
  • uploaders: Martin [DMD]
  • arch: all
  • std-ver: 4.7.0
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • oldstable: 1.0.0-3
  • stable: 1.0.0-6
  • testing: 3.21.0-1
  • unstable: 3.21.0-1
versioned links
  • 1.0.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.0.0-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.21.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • python3-zipp (1 bugs: 0, 1, 0, 0)
action needed
1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2024-5569: (needs triaging) A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is identical in both projects. The infinite loop can be initiated through the use of functions affecting the `Path` module in both zipp and zipfile, such as `joinpath`, the overloaded division operator, and `iterdir`. Although the infinite loop is not resource exhaustive, it prevents the application from responding. The vulnerability was addressed in version 3.19.1 of jaraco/zipp.

You can find information about how to handle this issue in the security team's documentation.

Created: 2024-07-09 Last update: 2025-02-27 05:02
debian/patches: 1 patch to forward upstream low

Among the 1 debian patch available in version 3.21.0-1 of the package, we noticed the following issues:

  • 1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2024-06-09 Last update: 2024-11-11 20:31
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.7.0).
Created: 2025-02-21 Last update: 2025-02-27 13:25
news
[rss feed]
  • [2024-11-13] python-zipp 3.21.0-1 MIGRATED to testing (Debian testing watch)
  • [2024-11-11] Accepted python-zipp 3.21.0-1 (source) into unstable (Colin Watson)
  • [2024-09-19] python-zipp 3.20.2-1 MIGRATED to testing (Debian testing watch)
  • [2024-09-16] Accepted python-zipp 3.20.2-1 (source) into unstable (Colin Watson)
  • [2024-09-01] python-zipp 3.20.1-1 MIGRATED to testing (Debian testing watch)
  • [2024-08-30] Accepted python-zipp 3.20.1-1 (source) into unstable (Colin Watson)
  • [2024-08-17] python-zipp 3.20.0-1 MIGRATED to testing (Debian testing watch)
  • [2024-08-14] Accepted python-zipp 3.20.0-1 (source) into unstable (Colin Watson)
  • [2024-08-08] python-zipp 3.19.2-3 MIGRATED to testing (Debian testing watch)
  • [2024-08-06] Accepted python-zipp 3.19.2-3 (source) into unstable (Colin Watson)
  • [2024-06-11] python-zipp 3.19.2-2 MIGRATED to testing (Debian testing watch)
  • [2024-06-08] Accepted python-zipp 3.19.2-2 (source) into unstable (Martin)
  • [2024-06-08] Accepted python-zipp 3.19.2-1 (source) into unstable (Martin)
  • [2022-12-25] python-zipp 1.0.0-6 MIGRATED to testing (Debian testing watch)
  • [2022-12-21] Accepted python-zipp 1.0.0-6 (source) into unstable (Jochen Sprickerhof)
  • [2022-12-06] python-zipp 1.0.0-5 MIGRATED to testing (Debian testing watch)
  • [2022-12-01] Accepted python-zipp 1.0.0-5 (source) into unstable (Jelmer Vernooij) (signed by: Jelmer Vernooij)
  • [2022-06-10] python-zipp 1.0.0-4 MIGRATED to testing (Debian testing watch)
  • [2022-06-04] Accepted python-zipp 1.0.0-4 (source) into unstable (Sandro Tosi)
  • [2020-08-13] Accepted python-zipp 1.0.0-3~bpo10+1 (source all) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Paul Wise)
  • [2020-06-10] python-zipp 1.0.0-3 MIGRATED to testing (Debian testing watch)
  • [2020-06-05] Accepted python-zipp 1.0.0-3 (source) into unstable (Ondřej Nový)
  • [2020-04-25] python-zipp 1.0.0-2 MIGRATED to testing (Debian testing watch)
  • [2020-04-14] Accepted python-zipp 1.0.0-2 (source) into unstable (Sandro Tosi)
  • [2020-01-22] python-zipp 1.0.0-1 MIGRATED to testing (Debian testing watch)
  • [2020-01-17] Accepted python-zipp 1.0.0-1 (source) into unstable (Ondřej Nový)
  • [2019-09-18] python-zipp 0.6.0-1 MIGRATED to testing (Debian testing watch)
  • [2019-09-13] Accepted python-zipp 0.6.0-1 (source) into unstable (Ondřej Nový)
  • [2019-08-06] python-zipp 0.5.2-2 MIGRATED to testing (Debian testing watch)
  • [2019-08-01] Accepted python-zipp 0.5.2-2 (source) into unstable (Ondřej Nový)
  • 1
  • 2
bugs [bug history graph]
  • all: 1
  • RC: 0
  • I&N: 1
  • M&W: 0
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • screenshots
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 3.21.0-1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing