[Bug 1411176] [NEW] Please remove python-oauth2 package from Ubuntu repo

Launchpad Bug Tracker 1411176 at bugs.launchpad.net
Tue Mar 3 23:58:41 UTC 2015


*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Steve Beattie (sbeattie):

Hello,

please remove the package python-oauth2 from the repositories.

The package has two open CVEs [1][2][3]. Upstream is not longer active.


CU
Jörg


[1] https://bugs.launchpad.net/ubuntu/+source/python-oauth2/+bug/1384815
[2] https://bugs.launchpad.net/bugs/cve/2013-4346
[3] https://bugs.launchpad.net/bugs/cve/2013-4347

** Affects: python-oauth2 (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

** Affects: python-oauth2 (Debian)
     Importance: Unknown
         Status: Fix Released

-- 
 Please remove python-oauth2  package from Ubuntu repo
https://bugs.launchpad.net/bugs/1411176
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is subscribed to the bug report.



More information about the ubuntu-archive mailing list