[MIR] python-ldap3

Bug #1634535 reported by Chuck Short
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-ldap3 (Ubuntu)
Invalid
Undecided
Ubuntu Security Team

Bug Description

[Availability]
In universe

[Rationale]
New dependency for Barbican

[Security]
No security history

[Quality assurance]
Package builds py2 and py3 modules, unit tests run for both.

[Dependencies]
All in main

[Standards compliance]
OK

[Maintenance]
ubuntu-openstack

[Background information]
Build dependency for Barbican, since it is superior compared to python-ldap

Revision history for this message
Michael Terry (mterry) wrote :

- Tests exist but aren't run in current packaging. Why is that? They should be run during build at the least. (Do they need a weird ldap server setup or something?)

- I'm requesting a quick security look, out of an abundance of caution. This package (unlike python-ldap) now parses the LDAP protocol itself. It's in python, so I assume it'd be difficult to exploit. But still.

Changed in python-ldap3 (Ubuntu):
assignee: nobody → Ubuntu Security Team (ubuntu-security)
status: New → Incomplete
Revision history for this message
Michael Terry (mterry) wrote :

(And I'll note that barbican is the only rdepend of python-ldap, so if we swap this in, we can demote python-ldap.)

Revision history for this message
Chuck Short (zulcss) wrote :

Superseeded by python-pyldap MIR

Changed in python-ldap3 (Ubuntu):
status: Incomplete → Invalid
Revision history for this message
Corey Bryant (corey.bryant) wrote :

Barbican only has a dependency on python-ldap3 (not python-pyldap). The problem is other upstream openstack projects depend on python-pyldap.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.