From 4de2a710a6a309a1601f1cf6fc15b9b638d3a3cb Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Mon, 26 Dec 2016 19:42:42 -0500 Subject: gnu: python-stem: Don't use python-pycrypto. Python-pycrypto is an optional dependency of python-stem. Python-pycrypto is unmaintained [0] and contains an exploitable buffer overflow bug [1]. [0] https://github.com/dlitz/pycrypto/issues/173 [1] https://github.com/dlitz/pycrypto/issues/176 * gnu/packages/python.scm (python-stem, python2-stem)[propagated-inputs]: Remove python-pycrypto. --- gnu/packages/python.scm | 2 -- 1 file changed, 2 deletions(-) (limited to 'gnu') diff --git a/gnu/packages/python.scm b/gnu/packages/python.scm index 919c05fcf9..2ddd1198e8 100644 --- a/gnu/packages/python.scm +++ b/gnu/packages/python.scm @@ -10667,8 +10667,6 @@ (define-public python-stem `(("python-mock" ,python-mock) ("python-pep8" ,python-pep8) ("python-pyflakes" ,python-pyflakes))) - (propagated-inputs - `(("python-pycrypto" ,python-pycrypto))) (home-page "https://stem.torproject.org/") (synopsis "Python controller library that allows applications to interact with Tor") -- cgit v1.2.3