I just confirmed that Jammy's `22.0.2+dfsg-1ubuntu0.7` is affected too. There it fails with a different error though:
``` # pip download --dest python/wheels meson==1.9.0 ERROR: Could not find a version that satisfies the requirement meson==1.9.0 (from versions: 0.29.0.dev1, 0.29.0.dev2, 0.29.0.dev3, 0.29.0, 0.30.0, 0.31.0, 0.32.0, 0.33.0, 0.34.0, 0.35.0, 0.35.1, 0.36.0, 0.37.0, 0.37.1, 0.38.0, 0.38.1, 0.39.0, 0.39.1, 0.40.0, 0.40.1, 0.41.0, 0.41.1, 0.41.2, 0.42.0, 0.42.1, 0.43.0, 0.44.0, 0.44.1, 0.45.0, 0.45.1, 0.46.0, 0.46.1, 0.47.0, 0.47.1, 0.47.2, 0.48.0, 0.48.1, 0.48.2, 0.49.0, 0.49.1, 0.49.2, 0.50.0, 0.50.1, 0.51.0, 0.51.1, 0.51.2, 0.52.0, 0.52.1, 0.53.0, 0.53.1, 0.53.2, 0.54.0, 0.54.1, 0.54.2, 0.54.3, 0.55.0, 0.55.1, 0.55.2, 0.55.3, 0.56.0rc1, 0.56.0rc2, 0.56.0, 0.56.1, 0.56.2, 0.57.0rc1, 0.57.0, 0.57.1, 0.57.2, 0.58.0rc1, 0.58.0, 0.58.1, 0.58.2, 0.59.0rc1, 0.59.0rc2, 0.59.0, 0.59.1, 0.59.2, 0.59.3, 0.59.4, 0.60.0rc1, 0.60.0rc2, 0.60.0, 0.60.1, 0.60.2, 0.60.3, 0.61.0rc1, 0.61.0, 0.61.1, 0.61.2, 0.61.3) ERROR: No matching distribution found for meson==1.9.0 ``` -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2154576 Title: python3-pip-whl 24.0+dfsg-1ubuntu1.3+esm1: CVE-2025-66471 backport truncates gzip-decoded responses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/python-pip/+bug/2154576/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
