From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id mGesK+5g62BBIQEAgWs5BA (envelope-from ) for ; Sun, 11 Jul 2021 23:21:50 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id mA1WJ+5g62BaQQAAB5/wlQ (envelope-from ) for ; Sun, 11 Jul 2021 21:21:50 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 25606B53 for ; Sun, 11 Jul 2021 23:21:50 +0200 (CEST) Received: from localhost ([::1]:37250 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1m2gtY-0002uF-70 for larch@yhetil.org; Sun, 11 Jul 2021 17:21:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:57216) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m2grr-0007x2-NT for bug-guix@gnu.org; Sun, 11 Jul 2021 17:20:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:52591) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1m2grr-0005WB-FI for bug-guix@gnu.org; Sun, 11 Jul 2021 17:20:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1m2grq-0004EH-HI; Sun, 11 Jul 2021 17:20:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#49530: pycryptodome bundles libtomcrypt, fonts, JavaScript and CSS Resent-From: Maxime Devos Original-Sender: "Debbugs-submit" Resent-CC: 0x2d@disroot.org, bug-guix@gnu.org Resent-Date: Sun, 11 Jul 2021 21:20:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 49530 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 49530@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org X-Debbugs-Original-Xcc: slg <0x2d@disroot.org> Received: via spool by submit@debbugs.gnu.org id=B.162603834516187 (code B ref -1); Sun, 11 Jul 2021 21:20:02 +0000 Received: (at submit) by debbugs.gnu.org; 11 Jul 2021 21:19:05 +0000 Received: from localhost ([127.0.0.1]:35902 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m2gqu-0004D1-ON for submit@debbugs.gnu.org; Sun, 11 Jul 2021 17:19:04 -0400 Received: from lists.gnu.org ([209.51.188.17]:44680) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m2gqq-0004Ca-MQ for submit@debbugs.gnu.org; Sun, 11 Jul 2021 17:19:04 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:57094) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m2gqq-0005n2-5Q for bug-guix@gnu.org; Sun, 11 Jul 2021 17:19:00 -0400 Received: from albert.telenet-ops.be ([2a02:1800:110:4::f00:1a]:50142) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1m2gqn-0004Cd-S4 for bug-guix@gnu.org; Sun, 11 Jul 2021 17:18:59 -0400 Received: from butterfly.local ([213.132.138.115]) by albert.telenet-ops.be with bizsmtp id TxJt2500D2VaLWD06xJupU; Sun, 11 Jul 2021 23:18:54 +0200 Message-ID: From: Maxime Devos Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-Q13TMatb0u1LwnF5gzDt" Date: Sun, 11 Jul 2021 23:17:03 +0200 MIME-Version: 1.0 User-Agent: Evolution 3.34.2 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21; t=1626038334; bh=CA8j2ttpYjM/hl6Z1mwsF2txe1U/cBWHeAdNPUaPp2o=; h=Subject:From:To:Date; b=kYu3TGYPW6+fCreY9oA0omMYzj2t0LPum8G6xK9U1JpcrKDJoOJJpbVUPtXo1sROm qa39xV7ydnj6DrWtCi2mVKIYQd0RJOaOpoPTr7EmIts5DOeM1WE7Wv2d2z+eWDvxge 2xdaSaaAzh+dGfJq3ITECaXqailheKOYyqT9y+Z9HJOyZ/ufc0TsPaa95c/j9Hhtps uRrHRWSncY45Am+Yu1oW7sffmYZgVx3fc+Z6qZpndtCKmYVWJm05UOt5ICc3jR+sMP LZJdtgEhShtrZO9gFymV3iimboKHZOfSLTQlgREqYK+qO+3LwYx+80CmS0mh0GVkF2 nwwepKsXAFl0Q== Received-SPF: pass client-ip=2a02:1800:110:4::f00:1a; envelope-from=maximedevos@telenet.be; helo=albert.telenet-ops.be X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: slg <0x2d@disroot.org> Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1626038510; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:list-id:list-help:list-unsubscribe:list-subscribe: list-post:dkim-signature; bh=CA8j2ttpYjM/hl6Z1mwsF2txe1U/cBWHeAdNPUaPp2o=; b=TxcPywf/5THYnwyRka6o8o9UpHOZ054toIDUdnSnfYxH9Fc+Kfp9GL1/lZGNBeUiuZ5dup HqootyV1ZgYm9K9QfyXJoNiB0jZRD3QO38e2EkoRZZ4iDEhCNavm4Sx6uZgWYyfM7Ruhyn NWVXoP9+lNVqCIpmNXSf/LI9FMaCfuYU8fzrL81U/9xAYdMmxgxcgsxod6TMnDwenhPswb D6GbP3keO59UymYmWyETyts/LhK9a3AtoCYh4vhj+OaDnTe6yvveT7I2RXHyfScRonNJyj HsKEjeil0/DFm9qx5toxwb0r4LXIxt/ilODBWUg2NSstCLguGrTfYptZuxvn9g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1626038510; a=rsa-sha256; cv=none; b=qJVMnDRi1DQfYo2ijvBqKjA1isJMkF7ofUw1GPHFVXxptYrhqy1eJf9XJATl1VGCSTWhkv rgva5wReqj+w5FXi5lb1kpme+oOLgA/nT5K+yr93H6VPuNs40Q5WjqimwZUcAW/CAkjA9W zalA5Qps4J9mUQioNLQvmKG2tm9EQ1e2k1WmXaVUVF0qX5Nk7xQ/MT3AIbHmrjqm55tZVq prke7OtsMc0o5gOVlAeI7v6EctNlMXpz69TF2XbNLQcgHP+r7gDMLKceiwFN2rXy/S0qYD Lqzz004KW2lt4H8WToXkBLMCj/kJxaCoZSWnHxEUEh0930DBqO0UKKOS0TE2iw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=kYu3TGYP; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -3.40 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=kYu3TGYP; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 25606B53 X-Spam-Score: -3.40 X-Migadu-Scanner: scn1.migadu.com X-TUID: fDyZN/yj5FXX --=-Q13TMatb0u1LwnF5gzDt Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Debbugs-CC: slg <0x2d@disroot.org> Hi guix, In the context of ;, I looked at the source code of pycryptodome, version 3.10.1. It bundles some fonts, javascript, CSS, and libtomcrypt. That's not the version packaged in guix, but presumably version 3.9.9 has the same issues as well. More specifically, the following things are bundled: Doc/sphinx_rtd_theme/static/js/theme.js: Minified javascript code. It starts with /* sphinx_rtd_theme version 0.4.0 | MIT license */ Doc/sphinx_rtd_theme/static/js/modernizr.min.js: Likewise, and starts with /* Modernizr 2.6.2 (Custom Build) | MIT & BSD */ Doc/sphinx_rtd_theme/static/fonts: Various fonts (=E2=80=98font awesome=E2=80=99, =E2=80=98roboto slab=E2=80=99, =E2=80=98la= to=E2=80=99, =E2=80=98inconsolata=E2=80=99). Doc/sphinx_rtd_theme/static/css: Minified CSS. One file starts with /* sphinx_rtd_theme version 0.4.0 | MIT license */, the other is of unknon origin. There are also 'css.map' files. I don't know what these are. src/libtom: Bundled headers from 'libtomcrypt'. Curiously, I don't see corresponding '.c' files. Greetings, Maxime. --=-Q13TMatb0u1LwnF5gzDt Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYOtfwhccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7mDbAQDB83SvZKTkzTF5ZP25qMSpD+Lo wLEdsboLXrVtDyylGwD+L/l0FVePn2Tj4GIf0K23DH6GB2M3+Hdsli6JvzFtBwg= =GVxC -----END PGP SIGNATURE----- --=-Q13TMatb0u1LwnF5gzDt--