Debian Patches

Status for python-pip/20.3.4-4+deb11u1

Patch Description Author Forwarded Bugs Origin Last update
hands-off-system-packages.patch Prevent pip from removing system packages.
Adjust is_local() to consider OS-owned paths non-local. Fix the error
message for is_local() in the non-virtualenv case.
Geoffrey Thomas <geofft@ldpreload.com> not-needed debian https://github.com/geofft/pip.git 2014-12-04
debundle.patch Devendorize wheels and use system built wheels. Barry Warsaw <barry@python.org> no 2015-12-03
handle-unbundled-requests.patch Debian already unbundles things from requests. Barry Warsaw <barry@python.org> no 2016-01-29
set_user_default.patch Default to --user in non-virtual environments.
When running as a normal user in a non-virtual environment, default to
--user. When inside virtual environments, when running as root or when
--prefix or --target are specified, keep the default behavior.

Barry Warsaw <barry@debian.org>,
Anatoly techtonik <techtonik@gmail.com>,
Andrej Shadura <andrewsh@debian.org>
Didier Roche <didrocks@ubuntu.com>, yes debian upstream 2016-02-10
disable-pip-version-check.patch Set --disable-pip-version-check=True by default. Barry Warsaw <barry@python.org> no 2016-11-18
commands_list_version_workaround.patch Make sure pip's version parsing is always used

* Patch command/list.py to round trip versions through string and back to
versions to work around pip/setuptools incompatibility (Closes: #912379)
Scott Kitterman <scott@kitterman.com> yes debian upstream vendor 2020-04-01
add_pkg-resources_to_freeze.patch Include pkg-resources in freeze system wheels

* Add pkg-resources to pip freeze 'DEV_PKGS' so this Debian unique system
wheel does not show up when pip freeze is run (Closes: #871790)
Scott Kitterman <scott@kitterman.com> not-needed debian vendor 2020-04-04
wheel-and-pip-not-pip-wheels.patch wheel and pip not pip wheels Scott Kitterman <scott@kitterman.com> no 2020-05-08
debian-python2.7-sysconfig-workaround.patch debian python2.7 sysconfig workaround Scott Kitterman <scott@kitterman.com> no 2020-05-24
debug-command-for-unbundled.patch debug command for unbundled Scott Kitterman <scott@kitterman.com> no 2020-05-25
str-version.patch Re-parse pkg_resources Versions from str
When debundling pkg_resources and packaging use different Version
classes, causing trouble.

Based on: https://github.com/pypa/pip/pull/9467
Stefano Rivera <stefanor@debian.org> no 2021-03-01
git-split-ascii.patch Security: Don't split git references on unicode separators
Previously, maliciously formatted tags could be used to hijack a
commit-based pin. Using the fact that the split here allowed for
all of unicode's whitespace characters as separators -- which git allows
as a part of a tag name -- it is possible to force a different revision
to be installed; if an attacker gains access to the repository.

This change stops splitting the string on unicode characters, by forcing
the splits to happen on newlines and ASCII spaces.
Pradyun Gedam <pradyunsg@gmail.com> no upstream, https://github.com/pypa/pip/pull/9827 2021-05-11
native-map.patch Use native map() instead of map_multithread()
Avoids a race-condition when using zip-imported dependencies.
Stefano Rivera <stefanor@debian.org> no debian upstream, https://github.com/pypa/pip/commit/0252c04a16cd93fe422cebf0b48453b559a2e404 2022-03-07

All known versions for source package 'python-pip'

Links