gnu: python-pycrypto: Add TODO "removal" comment.

* gnu/packages/python.scm (python-pycrypto, python2-pycrypto): Add
comment.
This commit is contained in:
Leo Famulari 2016-12-26 19:49:27 -05:00
parent 4de2a710a6
commit 1194575b3c
No known key found for this signature in database
GPG Key ID: 2646FA30BACA7F08
1 changed files with 7 additions and 1 deletions

View File

@ -907,7 +907,13 @@ Python 3 support.")
(define-public python2-setuptools (define-public python2-setuptools
(package-with-python2 python-setuptools)) (package-with-python2 python-setuptools))
;;; Pycrypto is abandoned upstream [0] and contains at least one bug that can be
;;; exploited to achieve arbitrary code execution [1].
;;;
;;; TODO Remove this package from GNU Guix.
;;;
;;; [0] https://github.com/dlitz/pycrypto/issues/173
;;; [1] https://github.com/dlitz/pycrypto/issues/176
(define-public python-pycrypto (define-public python-pycrypto
(package (package
(name "python-pycrypto") (name "python-pycrypto")