[openstack-dev] [requirements][daisycloud][freezer][fuel][tatu][trove] pycrypto is dead andinsecure, you should migrate

Matthew Thode prometheanfire at gentoo.org
Thu Jun 14 04:20:22 UTC 2018


On 18-06-14 01:28:14, Zhang Fan wrote:
> Hi, Matthew
> 
> 
> Sorry for the late updates on patches. Trove team members recently are sort of busy with daily work. And it takes me awhile to get back focusing the upstream. Fortunately, we are still there, and trove is still alive :)
> 
> 
> About removing pycryto dependency, there are two patches, as [0] is merged and [1] is on the way, thanks Zhao Chao for working on [0]:
> 
> 
> [0].https://review.openstack.org/#/c/560292/
> 
> [1].https://review.openstack.org/#/c/573070/
> 
> Thanks anyone who helps us on this improments and looks forward to have more contributors joining us in OpenStack/Trove !
> 
> 
> Best wishes.
> Fan Zhang
> 
>  Original Message
> Sender: Matthew Thode<prometheanfire at gentoo.org>
> Recipient: openstack-dev at lists.openstack.org<openstack-dev at lists.openstack.org>
> Date: Wednesday, Jun 13, 2018 23:23
> Subject: Re: [openstack-dev][requirements][daisycloud][freezer][fuel][tatu][trove] pycrypto is dead andinsecure, you should migrate
> 
> 
> On 18-06-13 20:53:06, Rong Zhu wrote:
> > Hi, Matthew
> >
> > Solum removed pycryto dependency in [0]
> >
> > [0]: https://review.openstack.org/#/c/574244/
> >
> > --
> > Thanks,
> > Rong Zhu
> 
> Yep, just in time for the next reminder email too :D
> 
> > +----------------------------------------+---------------------------------------------------------------------+------+---------------------------------------------------+
> > | Repository                             | Filename                                                            | Line | Text                                              |
> > +----------------------------------------+---------------------------------------------------------------------+------+---------------------------------------------------+
> > | daisycloud-core                        | code/daisy/requirements.txt                                         |   17 | pycrypto>=2.6 # Public Domain                     |
> > | freezer                                | requirements.txt                                                    |   21 | pycrypto>=2.6 # Public Domain                     |
> > | fuel-dev-tools                         | contrib/fuel-setup/requirements.txt                                 |    5 | pycrypto==2.6.1                                   |
> > | fuel-web                               | nailgun/requirements.txt                                            |   24 | pycrypto>=2.6.1                                   |
> > | tatu                                   | requirements.txt                                                    |    7 | pycrypto>=2.6.1                                   |
> > | tatu                                   | test-requirements.txt                                               |    7 | pycrypto>=2.6.1                                   |
> > | trove                                  | integration/scripts/files/requirements/fedora-requirements.txt      |   30 | pycrypto>=2.6  # Public Domain                    |
> > | trove                                  | integration/scripts/files/requirements/ubuntu-requirements.txt      |   29 | pycrypto>=2.6  # Public Domain                    |
> > | trove                                  | requirements.txt                                                    |   47 | pycrypto>=2.6 # Public Domain                     |
> > +----------------------------------------+---------------------------------------------------------------------+------+---------------------------------------------------+
> 
> Reverse order this time :D
> 
> trove has https://review.openstack.org/#/c/573070 which is making good
> progress
> 
> The rest (tatu, fuel, freezer, daisycloud-core) I don't see any reviews,
> starting to wonder if they watch the list.
> 

Thanks for the work on it :D

On a related note I've created https://review.openstack.org/575163 for
freezer (depends on Doug's work though).

-- 
Matthew Thode (prometheanfire)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20180613/6eccff88/attachment.sig>


More information about the OpenStack-dev mailing list