Bug 34739 – univention-directory-logger: deprecated use of md5

Bug 34739 - univention-directory-logger: deprecated use of md5


Summary:	univention-directory-logger: deprecated use of md5

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	LDAP
Version:	UCS 4.2
Hardware:	All Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Philipp Hahn
QA Contact:	Florian Best

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2014-05-02 15:45 CEST by Philipp Hahn
Modified:	2017-06-29 19:03 CEST (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	Development Internal
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Cleanup, Security
Max CVSS v3 score:

Attachments
34739.diff (2.60 KB, patch) 2016-10-17 16:21 CEST, Philipp Hahn	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philipp Hahn

2014-05-02 15:45:55 CEST

/usr/lib/univention-directory-listener/system/directory_logger.py:39: DeprecationWarning: the md5 module is deprecated; use hashlib instead
  import md5


Long-term md5 should be replaced by a different hashing algorithm, as md5 is no longer considered cryptographically safe.

Comment 1 Philipp Hahn

2016-10-17 16:21:06 CEST

Created attachment 8125 [details]
34739.diff

123b23d Bug #34739 log: Switch hash implementation

Comment 2 Stefan Gohmann

2017-06-16 20:37:35 CEST

This issue has been filed against UCS 3. UCS 3 is out of the normal maintenance and many UCS components have vastly changed in UCS 4.

If this issue is still valid, please change the version to a newer UCS version otherwise this issue will be automatically closed in the next weeks.

Comment 3 Florian Best

2017-06-28 13:20:46 CEST

You commited this already: svn r73115 / svn r73130