[Openstack-security] [Bug 1240382] Re: python-oauth2 dependency is unmaintained and has security issues
Thomas Goirand
thomas at goirand.fr
Sun Jan 19 05:50:43 UTC 2014
Hi,
Is there someone working on the backport to Havana? FYI, keystone is
currently blocked from migrating from Debian Sid to Debian testing
because of this problem (eg: oauth2 has been removed from testing
because unmaintained).
Cheers,
Thomas
--
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1240382
Title:
python-oauth2 dependency is unmaintained and has security issues
Status in OpenStack Identity (Keystone):
Fix Committed
Bug description:
oauth2 is not maintained and have 2 CVE issues CVE-2013-4346 and CVE-2013-4347 and is not Python3 compatible
can you remove this dependency (maybe switching to requests ? )
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1240382/+subscriptions
More information about the Openstack-security
mailing list