Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 728460 - =dev-python/google-auth-1.14.3-r1 depends on dev-python/rsa <4.1
Summary: =dev-python/google-auth-1.14.3-r1 depends on dev-python/rsa <4.1
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Zac Medico
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2020-13757
  Show dependency tree
 
Reported: 2020-06-16 12:40 UTC by Marc Schiffbauer
Modified: 2020-08-09 22:30 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marc Schiffbauer gentoo-dev 2020-06-16 12:40:42 UTC
I am using goobook. With dev-python/rsa-4.2 being installed it fails like this:

Traceback (most recent call last):
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 583, in _build_master
    ws.require(__requires__)
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 900, in require
    needed = self.resolve(parse_requirements(requirements))
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 791, in resolve
    raise VersionConflict(dist, req).with_context(dependent_req)
pkg_resources.ContextualVersionConflict: (rsa 4.2 (/usr/lib/python3.7/site-packages), Requirement.parse('rsa<4.1,>=3.1.4'), {'google-auth'})

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python-exec/python3.7/goobook", line 6, in <module>
    from pkg_resources import load_entry_point
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 3251, in <module>
    @_call_aside
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 3235, in _call_aside
    f(*args, **kwargs)
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 3264, in _initialize_master_working_set
    working_set = WorkingSet._build_master()
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 585, in _build_master
    return cls._build_from_requirements(__requires__)
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 598, in _build_from_requirements
    dists = ws.resolve(reqs, Environment())
  File "/usr/lib/python3.7/site-packages/pkg_resources/__init__.py", line 791, in resolve
    raise VersionConflict(dist, req).with_context(dependent_req)
pkg_resources.ContextualVersionConflict: (rsa 4.2 (/usr/lib/python3.7/site-packages), Requirement.parse('rsa<4.1,>=3.1.4'), {'google-auth'})



So I think the DEPEND on dev-python/rsa has to extended.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-16 13:04:48 UTC
Ideally, we need this to work with >=dev-python/rsa-4.2 because we need to cleanup the old rsa.
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2020-07-30 06:27:52 UTC
Ping. Looks like there's a few new releases upstream, probably one of them is able to use newer rsa. Master seems to have it:

https://github.com/googleapis/google-auth-library-python/blob/master/setup.py#L27
Comment 3 Larry the Git Cow gentoo-dev 2020-08-09 22:07:56 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=56601e1b3e1a379dad813032bd2e88d12ac682cc

commit 56601e1b3e1a379dad813032bd2e88d12ac682cc
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2020-08-09 21:57:46 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2020-08-09 22:01:50 +0000

    dev-python/google-auth: Bump to version 1.20.1
    
    Closes: https://bugs.gentoo.org/728460
    Package-Manager: Portage-3.0.2, Repoman-2.3.23
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 dev-python/google-auth/Manifest                  |  1 +
 dev-python/google-auth/google-auth-1.20.1.ebuild | 53 ++++++++++++++++++++++++
 2 files changed, 54 insertions(+)
Comment 4 Larry the Git Cow gentoo-dev 2020-08-09 22:30:21 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=98ae81eb6cb40d4e52acc298381a1b91cc26eeb4

commit 98ae81eb6cb40d4e52acc298381a1b91cc26eeb4
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2020-08-09 22:25:01 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2020-08-09 22:28:42 +0000

    dev-python/google-auth: 1.14.3-r2 revbump for pinned rsa version
    
    Bug: https://bugs.gentoo.org/728460
    Package-Manager: Portage-3.0.2, Repoman-2.3.23
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 .../{google-auth-1.14.3-r1.ebuild => google-auth-1.14.3-r2.ebuild}       | 1 +
 dev-python/google-auth/google-auth-1.14.3.ebuild                         | 1 +
 2 files changed, 2 insertions(+)