https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298351

Charlie Li <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |Not Accepted
                 CC|                            |[email protected]
             Status|New                         |Closed
              Flags|maintainer-feedback?(python |maintainer-feedback+
                   |@FreeBSD.org)               |

--- Comment #1 from Charlie Li <[email protected]> ---
This is not exploitable on FreeBSD Ports with our package.

The functionality concerns downloading assets for packages, which has been
deprecated for a long time now. This code path is only taken when setuptools
itself is used for installing packages into a site-packages, usually with
easy_install, which we do not include in our package. In a pure Python
environment, this functionality is supplanted by pip. The Ports environment has
never used this downloading-assets part of the (deprecated) package management
functionality.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to