Re: python-werkzeug CVEs

2024-11-28 Thread Carsten Schoenert
Hi Sean, Am 29.11.24 um 04:22 schrieb Sean Whitton: Hello, There are three DoS CVEs for python-werkzeug in stable. I intend to fix these as part of the Debian LTS team, sponsored by Freexian. I would like also to fix them in bookworm, because that will become an LTS release eventually. Would

Re: Fwd: Updating Flask and Werkzeug to 3.1.x?

2024-11-28 Thread Carsten Schoenert
Hi Thomas and DPT, this update went (a bit unexpected :-) ) very well! But yeah, now Werkzeug and also Flask are up to date in unstable/testing! Not one single package needed any additional work. Am 25.11.24 um 10:39 schrieb Carsten Schoenert: Hrhr, I need to forward my answer to Thomas to t

python-werkzeug CVEs

2024-11-28 Thread Sean Whitton
Hello, There are three DoS CVEs for python-werkzeug in stable. I intend to fix these as part of the Debian LTS team, sponsored by Freexian. I would like also to fix them in bookworm, because that will become an LTS release eventually. Would you like me to go ahead and submit a stable update req

User roles in DPT salsa - Developer, Reporter

2024-11-28 Thread Alexandru Mihail
Hi all, This is a reply to https://lists.debian.org/debian-python/2024/11/msg00066.html but I feel this should have its own thread. I wander what is the purpose of the Developer, Reporter and Guest roles in salsa/DPT right now. As of now, out of 505 total users, 14 have the Developer role (includi