Package: gajim
Version: 0.11.4-3
Severity: important

Currently, gajim calls helpers.get_os_info() in _VersionCB in
src/common/connection_handlers.py every time a Version request comes in
and sending OS info is allowed.
helpers.get_os_info() calls lsb_release when it's available, which calls
apt-cache policy which may need some time.
Given #299307, #419669 or #479365, one even could build a remote DDoS out
of this :/

Please fix by calling lsb_release exactly once and caching the result.

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.27-x31-1
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gajim depends on:
ii  dnsutils               1:9.5.0.dfsg.P2-5 Clients provided with BIND
ii  libatk1.0-0            1.22.0-1          The ATK accessibility toolkit
ii  libc6                  2.7-16            GNU C Library: Shared libraries
ii  libcairo2              1.6.4-7           The Cairo 2D vector graphics libra
ii  libglib2.0-0           2.16.6-1          The GLib library of C routines
ii  libgtk2.0-0            2.12.11-4         The GTK+ graphical user interface 
ii  libgtkspell0           2.0.13-1+b1       a spell-checking addon for GTK's T
ii  libpango1.0-0          1.20.5-3          Layout and rendering of internatio
ii  libxss1                1:1.1.3-1         X11 Screen Saver extension library
ii  python                 2.5.2-3           An interactive high-level object-o
ii  python-glade2          2.12.1-6          GTK+ bindings: Glade support
ii  python-gtk2            2.12.1-6          Python bindings for the GTK+ widge
ii  python-support         0.8.7             automated rebuilding support for P

Versions of packages gajim recommends:
ii  dbus                          1.2.1-4    simple interprocess messaging syst
pn  notification-daemon           <none>     (no description available)
ii  python-dbus                   0.83.0-1   simple interprocess messaging syst
pn  python-gnupginterface         <none>     (no description available)

Versions of packages gajim suggests:
ii  aspell-en                     6.0-0-5.1  English dictionary for GNU Aspell
pn  avahi-daemon                  <none>     (no description available)
pn  nautilus-sendto               <none>     (no description available)
pn  network-manager               <none>     (no description available)
pn  python-avahi                  <none>     (no description available)
ii  python-gnome2                 2.22.0-1   Python bindings for the GNOME desk
pn  python-gnome2-desktop         <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to