Bug 2451364

Summary:	Changes/DeprecatePython-dateutil
Product:	[Fedora] Fedora	Reporter:	Allison King <alking>
Component:	Changes Tracking	Assignee:	Mattia Verga <mattia.verga>
Status:	ON_QA ---	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	alking, mattia.verga, tilmann
Target Milestone:	---	Flags:	fedora-admin-xmlrpc: mirror+
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2402320

Description Allison King 2026-03-25 16:26:10 UTC

This is a tracking bug for Change: Changes/DeprecatePython-dateutil
For more details, see: https://fedoraproject.org/wiki/Changes/DeprecatePython-dateutil

Python-dateutil is an extension to the standard Python datetime features, widely used by a lot of other projects. However, upstream is unmaintained and possibly with unaddressed security issues. The plan is to try to continue packaging until feasible, but mark the package as deprecated in Fedora and try to convince other dependent project to switch over from it.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Dr. Tilmann Bubeck 2026-03-29 12:49:57 UTC

Why do you claim it is unmaintained? https://github.com/dateutil/dateutil/commits/master/ shows, latest commit is from 2026-03-02 and documentation does not state "unmaintained" but names a maintainer.

Comment 2 Mattia Verga 2026-03-29 13:16:28 UTC

(In reply to Dr. Tilmann Bubeck from comment #1)
> Why do you claim it is unmaintained?
> https://github.com/dateutil/dateutil/commits/master/ shows, latest commit is
> from 2026-03-02 and documentation does not state "unmaintained" but names a
> maintainer.

See https://github.com/dateutil/dateutil/issues/1404
Also possible unaddressed vulnerability claimed at https://github.com/dateutil/dateutil/issues/1450

Recent commits are just tweaking CI jobs or updating depenencies, no real development in over two years.