koji

#3975 Bandit [B411]: use defusedxml to prevent remote XML attacks
Merged by tkopecek. Opened by julian8628.
julian8628/koji bandit-B411  into  master

Download 3975.patch
  • putting xmlrpc stuff into koji.xmlrpcplus
  • adding koji.xmlrpcplus.xmlrpc_server to refer
  • replacing refs of original xmlrpc.client.dumps to enhanced
    koji.xmlrpcplus.dumps

fixes: #3964

Also Require in spec is needed.

1 new commit added

  • update spec

Also Require in spec is needed.

Thanks! fixed

Could you also modify the Dockerfiles, so we can pass tests with those images?

1 new commit added

  • add defusedxml installation in Dockerfiles

Dockerfiles updated.

BTW, are we ok to install requirements.txt for tox env instead now?

Dockerfiles updated.

BTW, are we ok to install requirements.txt for tox env instead now?

Mostly yes, but as always, rpm is problematic one. @jcupova will try to cleanup and document test envs as part of #3868

Metadata Update from @tkopecek:
- Pull-request tagged with: testing-ready

Metadata Update from @relias-redhat:
- Pull-request tagged with: testing-done

Commit 91cf2b50 fixes this pull-request

Pull-Request has been merged by tkopecek
Metadata
None

testing-done testing-ready

Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.