unofficial mirror of guix-devel@gnu.org 
 help / color / mirror / code / Atom feed
* pycrypto buffer overflow (potentially affects onionshare and other packages)
@ 2016-12-26 17:43 Leo Famulari
  2016-12-26 18:08 ` Leo Famulari
  0 siblings, 1 reply; 7+ messages in thread
From: Leo Famulari @ 2016-12-26 17:43 UTC (permalink / raw)
  To: guix-devel

[-- Attachment #1: Type: text/plain, Size: 372 bytes --]

The pycrypto library contains at least one dangerous buffer overflow:

https://github.com/dlitz/pycrypto/issues/176

And the pycrypto project is inactive:

https://github.com/dlitz/pycrypto/issues/173

The list of our packages that use pycrypto:

python-axolotl-0.1.35
onionshare-0.9.2
python-flask-restful-swagger-0.19
python-swiftclient-2.6.0
jrnl-1.9.7
ansible-2.1.0.0

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2017-01-10  0:09 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-12-26 17:43 pycrypto buffer overflow (potentially affects onionshare and other packages) Leo Famulari
2016-12-26 18:08 ` Leo Famulari
2016-12-27  0:54   ` Leo Famulari
2017-01-02 20:41     ` Ludovic Courtès
2017-01-03  4:59       ` Leo Famulari
2017-01-05 10:39         ` Ludovic Courtès
2017-01-10  0:09           ` Leo Famulari

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).