[Bugs] #2070 UNSP: Is it possible to drop audioop dependency from TA

Sugar Labs Bugs bugtracker-noreply at sugarlabs.org
Thu Jul 1 01:27:07 EDT 2010


#2070: Is it possible to drop audioop dependency from TA
------------------------------------------+---------------------------------
    Reporter:  alsroot                    |          Owner:  walter                     
        Type:  defect                     |         Status:  new                        
    Priority:  Unspecified by Maintainer  |      Milestone:  Unspecified by Release Team
   Component:  Turtleart                  |        Version:  Unspecified                
    Severity:  Unspecified                |       Keywords:                             
Distribution:  openSUSE                   |   Status_field:  Unconfirmed                
------------------------------------------+---------------------------------
 There is a vulnerability in audioop
 http://vigilance.fr/vulnerability/Python-buffer-overflows-of-audioop-9708.
 And for example openSUSE droped audioop from python package, most likely
 they will revert it after fixing issue. But maybe it will be easier to
 just remove audioop dependency from TA?

-- 
Ticket URL: <http://bugs.sugarlabs.org/ticket/2070>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system


More information about the Bugs mailing list