#8259 Please drop use of python3-dns
Closed: wontfix 3 years ago by cheimes. Opened 3 years ago by simo.

The package is apparently unmaintained or understaffed (last realease 2 years ago), but more importantly brings in very undesirable dependencies: pycryptodomex and python-ecdsa, the latter in particular should never be used in any production software:
https://github.com/warner/python-ecdsa/blob/master/README.md#security

Please drop asap.


dnspython does not require the packages to work. Please see https://bugzilla.redhat.com/show_bug.cgi?id=1802998

IPA is not going to drop python-dns. Upstream python-dns has moved to PyCA cryptography for dnspython 2.x (not yet released). Downstream Fedora and RHEL have 1.x, so we need a backport.

By the way IPA does not use any of the crypto stuff in dnspython.

Metadata Update from @cheimes:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata