Bug 1266802
| Summary: | python-openid missing Requires on defusedxml | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Dan Callaghan <dcallagh> |
| Component: | python3-openid | Assignee: | Jakub Dorňák <jdornak> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 22 | CC: | hhorak, jdornak, msuchy |
| Target Milestone: | --- | Keywords: | EasyFix |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | python3-openid-3.0.9-2.fc22 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-11-27 20:52:29 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Please note that python3-openid is NOT a subpackage of python-openid. python3-openid is a forked version, and as such a different upstream. And for additional information: the original upstream of python-openid does not use defusedxml, so does not need a change. python3-openid-3.0.9-2.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2015-ecc987b3c4 python3-openid-3.0.9-2.fc22 has been submitted as an update to Fedora 22. https://bodhi.fedoraproject.org/updates/FEDORA-2015-5ceccc2a07 python3-openid-3.0.9-2.fc22 has been pushed to the Fedora 22 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with $ su -c 'dnf --enablerepo=updates-testing update python3-openid' You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-5ceccc2a07 python3-openid-3.0.9-2.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with $ su -c 'dnf --enablerepo=updates-testing update python3-openid' You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-ecc987b3c4 python3-openid-3.0.9-2.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report. python3-openid-3.0.9-2.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report. |
Version-Release number of selected component (if applicable): python3-openid-3.0.5-1.fc22.noarch How reproducible: easily Steps to Reproduce: 1. Start from a fresh install and/or remove python3-defusedxml 2. Import openid.server.server in your Python 3 program Actual results: Traceback (most recent call last): File "app.py", line 7, in <module> from openid.server.server import Server as OpenIDServer, ProtocolError as OpenIDProtocolError File "/usr/lib/python3.4/site-packages/openid/server/server.py", line 129, in <module> from openid.server.trustroot import TrustRoot, verifyReturnTo File "/usr/lib/python3.4/site-packages/openid/server/trustroot.py", line 21, in <module> from openid.yadis import services File "/usr/lib/python3.4/site-packages/openid/yadis/services.py", line 3, in <module> from openid.yadis.filters import mkFilter File "/usr/lib/python3.4/site-packages/openid/yadis/filters.py", line 14, in <module> from openid.yadis.etxrd import expandService File "/usr/lib/python3.4/site-packages/openid/yadis/etxrd.py", line 31, in <module> SafeElementTree = importSafeElementTree() File "/usr/lib/python3.4/site-packages/openid/oidutil.py", line 87, in importSafeElementTree 'Tried importing %r' % (module_names,)) ImportError: Unable to find a ElementTree module that is not vulnerable to XXE. Tried importing ['defusedxml.cElementTree', 'defusedxml.ElementTree'] Expected results: Successful import Additional info: Just need to add Requires: python3-defusedxml I think (and presumably Requires: python-defusedxml for the Python 2 subpackage).