search

cschwan / sage-on-gentoo

(Unofficial) Gentoo Overlay for Sage- and Sage-related ebuilds
84 stars 26 forks source link

sci-mathematics/sage depends: pycrypto -> pycryptodome #510

Closed WGH- closed 6 years ago

WGH- commented 6 years ago

As per https://bugs.gentoo.org/611568,

dev-python/pycryptodome is a fork of discontinued dev-python/pycrypto. Since the latter is dead since 2014, it'd be reasonable to replace its uses with the former.

Dead pycrypto is known to contain unfixed security bugs (dlitz/pycrypto#176), so it would make sense to switch to the maintained fork.

kiwifb commented 6 years ago

I am not even sure it is a real dependency anymore. I'll have to check.

kiwifb commented 6 years ago

It appears that nothing really seems to require pycrypto in sage's code - directly. I am consulting with fellow packagers and upstream on this.

kiwifb commented 6 years ago

I am removing this dependency, I'll see what other people are doing but removing doesn't affect sage or sagenb in the slightest.