guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: pycrypto buffer overflow (potentially affects onionshare and other p


From: Ludovic Courtès
Subject: Re: pycrypto buffer overflow (potentially affects onionshare and other packages)
Date: Mon, 02 Jan 2017 21:41:26 +0100
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux)

Leo Famulari <address@hidden> skribis:

> On Mon, Dec 26, 2016 at 01:08:44PM -0500, Leo Famulari wrote:
>> On Mon, Dec 26, 2016 at 12:43:44PM -0500, Leo Famulari wrote:
>> > The list of our packages that use pycrypto:
>> 
>> [...]
>> 
>> > onionshare-0.9.2
>> 
>> This comes through python-stem. I've contacted the stem maintainer about
>> this issue.
>
> Based on my discussion with the Stem maintainer, I removed pycrypto from
> the dependency graph of OnionShare and added a comment about removing
> the pycrypto package in 4de2a710a6a309a1601f1cf6fc15b9b638d3a3cb and
> 1194575b3c44969e4f68cd10a62e6ed8603e39b4, respectively.

Thanks.  Looks like another case of an important piece of software
lacking a maintainer…

Ludo’.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]