| Bug ID | 1177083 |
|---|---|
| Summary | python-aliyun-python-sdk-core package ships a vendored python-requests package |
| Classification | openSUSE |
| Product | openSUSE Tumbleweed |
| Version | Current |
| Hardware | Other |
| OS | Other |
| Status | NEW |
| Severity | Normal |
| Priority | P5 - None |
| Component | Cloud:Tools |
| Assignee | public-cloud-maintainers@suse.de |
| Reporter | adrian.glaubitz@suse.com |
| QA Contact | qa-bugs@suse.de |
| Found By | --- |
| Blocker | --- |
The python-aliyun-python-sdk-core ships a vendored version of the python-requests package which should be removed in the next version update to avoid hidden vulnerabilities in the embedded version of python-requests as well as avoid code duplicity.