Comments (4)
mitya57
commented on July 19, 2024
The same applies to tlslite (another security-sensitive piece of software, affected by i.e. CVE-2014-3566, CVE-2013-0169 and CVE-2011-3389). There are two embedded copies of tlslite in the current git.
from gdata-python-client.
mitya57
commented on July 19, 2024
Hum, I reported this bug in March, and haven't got a single response. I don't think this is how security issues should be treated, especially for something developed by Google. This package doesn't seem to be abandoned (last commit 2 weeks ago), and the bug in question isn't that difficult to fix (the easiest way would be to just drop the embedded stuff, as I suggested).
@aliafshar — any comments?
from gdata-python-client.
aliafshar
commented on July 19, 2024
Yes, sorry, this library is really only in "accepts contributions" mode. I agree with you though, we should fix this. Can you help, please? Seems like a not-too-difficult change. BUT of course changing anything with a Python library this old can have many unwanted side effects.
from gdata-python-client.
mitya57
commented on July 19, 2024
Ok, submitted as #36.
from gdata-python-client.
Related Issues (20)
- ImportError: No module named tlslite.utils HOT 4
- Python3 version is needed HOT 3
- Could not use AuditService.
- Gdata gauth.py / http_core.py does not support http_proxy while rest of the API does
- Reference Guide link is broken
- InsertPhotoSimple - [Errno 32] Broken Pipe HOT 1
- Mark this library as 'not maintained' HOT 4
- Youtube data api'youtube.search.list()' returning handshake error
- Authentication doesn't work: Login Error HOT 2
- tests fail, referring to nonexistent 'finance' and 'notebook' modules
- import gdata not work HOT 2
- Sites example uri invalid syntax HOT 1
- Trying to install the google data library, running into syntax errors
- ]]b .+*/. ll////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// HOT 1
- Error message optional_warn_function.func_name = f.func_name AttributeError: 'function' object has no attribute 'func_name' HOT 10
- install_requires unknown distribution option. HOT 2
- Try installing gdata with the following command, HOT 1
- AttributeError: module 'atom' has no attribute 'LinkFinder'
- Facing issue when create shared contacts - AttributeError HOT 1
- Opt-out
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gdata-python-client.