Comment 2 for bug 1620293

Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

python-requests-kerberos and pykerberos are also missing a team subscriber; a team that will look after bugs in these packages.

pykerberos is a little worrying in that the last changes happened over a year ago, and there has been a new upstream version since June that hasn't been packaged. It's not horrible yet, as it appears to be a fairly regularly maintained project upstream, but it may be missing an active maintainer team to look after the package in Debian and Ubuntu. The new upstream version should be packaged.

Team subscriber is definitely a blocker, and so is enabling hardening for pykerberos. Given that pykerberos deals with potentially sensitive auth/authz information, it should be reviewed by the security team.