stop depending on pycrypto #54115
Assignees
Labels
Confirmed
Salt engineer has confirmed bug/feature - often including a MCVE
Core
relates to code central or existential to Salt
Feature
new functionality including changes to functionality and code refactors, etc.
ZRelease-Sodium
retired label
Milestone
Comments
JanZerebecki
added a commit
to JanZerebecki/salt
that referenced
this issue
Aug 5, 2019
pycrypto is unmaintained and has open security issues. Fixes: saltstack#54115
twangboy
added
Feature
JanZerebecki
added a commit
to JanZerebecki/salt
that referenced
this issue
Aug 16, 2019
pycrypto is unmaintained and has open security issues. Fixes: saltstack#54115
JanZerebecki
added a commit
to JanZerebecki/salt
that referenced
this issue
Aug 17, 2019
pycrypto is unmaintained and has open security issues. Fixes: saltstack#54115
|
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. If this issue is closed prematurely, please leave a comment and we will gladly reopen the issue. |
sagetherage
added
the
Confirmed
|
Thank you for updating this issue. It is no longer marked as stale. |
|
Note that OS packages (e.g. python3-crypto) should already have the security issues patched on currently-supported systems. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description of Issue
PyCrypto is unmaintained and has open security issues. This was already reported in e.g. #52674 but it is currently closed.
Steps to Reproduce Issue
Run
pip download saltand check if it mentions pycrypto. It currently does, but it should not. It currently comes from https://github.com/saltstack/salt/blob/develop/requirements/zeromq.txt .Versions Report
Checked for 2019.2.0 via pip, and on branch develop by inspecting the above file.
The text was updated successfully, but these errors were encountered: