gnu: python-pycrypto: Add TODO "removal" comment.

* gnu/packages/python.scm (python-pycrypto, python2-pycrypto): Add
comment.
This commit is contained in:
Leo Famulari 2016-12-26 19:49:27 -05:00
parent 4de2a710a6
commit 1194575b3c
No known key found for this signature in database
GPG key ID: 2646FA30BACA7F08

View file

@ -907,7 +907,13 @@ (define-public python-setuptools
(define-public python2-setuptools
(package-with-python2 python-setuptools))
;;; Pycrypto is abandoned upstream [0] and contains at least one bug that can be
;;; exploited to achieve arbitrary code execution [1].
;;;
;;; TODO Remove this package from GNU Guix.
;;;
;;; [0] https://github.com/dlitz/pycrypto/issues/173
;;; [1] https://github.com/dlitz/pycrypto/issues/176
(define-public python-pycrypto
(package
(name "python-pycrypto")