Is it possible to drop audioop dependency from TA

[alsroot]

There is a vulnerability in audioop
 http://vigilance.fr/vulnerability/Python-buffer-overflows-of-audioop-9708.
And for example openSUSE droped audioop from python package, most likely they will revert it after fixing issue. But maybe it will be easier to just remove audioop dependency from TA?

[walter]

Does TA have a dependency on audioop? I couldn't find it. Is it pulled in by gst?

[alsroot]

Sorry, it was in TA-83...

[walter]

I just checked the tar file for 0.83 and there is no audioop.so (nor do I think it would have been called by so recent a version). I wonder if this is an example of install not removing old files?

[alsroot]

talogo.py from v83 contains "import audioop" but looks like doesn't use it anymore.

[walter]

Must have before I cleaned up the spurious imports... Thanks for tracking this down.