On 11-05-2025 05:19, Cristian Le via devel wrote:
On 11 May 2025 03:24:14 CEST, Neal Gompa <ngompa13@xxxxxxxxx> wrote:
Huh, I think we retired this years ago in favor of
python-pycryptodomex:
https://src.fedoraproject.org/rpms/python-pycryptodomex
If you've still got projects using pycryptodome, you should port them
to pycryptodomex.
I believe you are confusing it with python-crypto. There was recent discussion about this on python channel. Afaiu pycryptodome and pyrcryptodomex are the same package with different namespace. Why pycryptodome was retired is very mysterious to me as I read about it. Whether projects *should* be migrating to pycryptodomex was also unclear.
It's more confusing than that according to the project's docs [1].
You are right, both packages have the same origin and serve a different
namespace. When installing `pycryptodome` the package will install into
the Crypto namespace, which conflicts with the old PyCrypto package,
which is obsolete and has known vulnerabilities.
That package is still available in Fedora as python-crypto with two
dependent packages: python-beaker and winpd.
When installing `pycryptodomex` the package will use the Cryptodome
namespace, avoiding the conflict with PyCrypto.
I think the suggestion made on the Python mailing list [2] is the way
forward: replace python-crypto with python-pycryptodome.
If `pycryptodome` SHOULD originate from the same source package as
`pycryptodomex` is another discussion.
[1] https://www.pycryptodome.org/src/installation#installation
[2]
https://lists.fedoraproject.org/archives/list/python-devel@xxxxxxxxxxxxxxxxxxxxxxx/message/UTH7MYUQSSZGN2MPQNGCHLWHDMHDNCQH/
-- Sandro
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
