gnu: python-pycrypto: Add TODO "removal" comment.
* gnu/packages/python.scm (python-pycrypto, python2-pycrypto): Add comment.
This commit is contained in:
parent
4de2a710a6
commit
1194575b3c
|
@ -907,7 +907,13 @@ Python 3 support.")
|
||||||
(define-public python2-setuptools
|
(define-public python2-setuptools
|
||||||
(package-with-python2 python-setuptools))
|
(package-with-python2 python-setuptools))
|
||||||
|
|
||||||
|
;;; Pycrypto is abandoned upstream [0] and contains at least one bug that can be
|
||||||
|
;;; exploited to achieve arbitrary code execution [1].
|
||||||
|
;;;
|
||||||
|
;;; TODO Remove this package from GNU Guix.
|
||||||
|
;;;
|
||||||
|
;;; [0] https://github.com/dlitz/pycrypto/issues/173
|
||||||
|
;;; [1] https://github.com/dlitz/pycrypto/issues/176
|
||||||
(define-public python-pycrypto
|
(define-public python-pycrypto
|
||||||
(package
|
(package
|
||||||
(name "python-pycrypto")
|
(name "python-pycrypto")
|
||||||
|
|
Loading…
Reference in New Issue