pywikibot transitive dependency on crypto
Closed, InvalidPublicBUG REPORT
Actions

Assigned To

None

Authored By

	Seppl2013
	May 22 2020, 9:51 AM

Description

Steps to Reproduce:

Try running an automatic test using pywikibot library with travis just specifying pywikibot pywikibot>=3.0.20200508 in requirements.txt should work.
See https://travis-ci.org/github/WolfgangFahl/XSDToSMW/jobs/689972503

Actual Results:
ERROR: tests.test_pywikibot (unittest.loader._FailedTest)

ImportError: Failed to import test module: tests.test_pywikibot

Traceback (most recent call last):

File "/opt/python/3.8.1/lib/python3.8/unittest/loader.py", line 436, in _find_test_path

  module = self._get_module_from_name(name)

File "/opt/python/3.8.1/lib/python3.8/unittest/loader.py", line 377, in _get_module_from_name

  __import__(name)

File "/home/travis/build/WolfgangFahl/XSDToSMW/tests/test_pywikibot.py", line 2, in <module>

  from wikibot.wikibot import WikiBot

File "/home/travis/virtualenv/python3.8.1/lib/python3.8/site-packages/wikibot/wikibot.py", line 12, in <module>

  from wikibot.crypt import Crypt

File "/home/travis/virtualenv/python3.8.1/lib/python3.8/site-packages/wikibot/crypt.py", line 6, in <module>

  from Crypto.Hash import MD5

ModuleNotFoundError: No module named 'Crypto'

Expected Results:

Related Objects

Mentioned Here: T203435: 'cryptography' dependency reported as vulnerable

Event Timeline

Seppl2013 created this task.May 22 2020, 9:51 AM

Restricted Application added subscribers: Liuxinyu970226, Aklapper. · View Herald TranscriptMay 22 2020, 9:51 AM

@Seppl2013: Assuming this task is about the Pywikibot code project, hence adding that project tag so other people can find this task. Please set appropriate project tags when possible. Thanks!

The line from wikibot.crypt import Crypt seems to come from https://github.com/WolfgangFahl/py-3rdparty-mediawiki/blob/master/wikibot/wikibot.py and is not included in Pywikibot itself.

Regarding Pywikibot, see T203435 and related https://gerrit.wikimedia.org/r/#/c/pywikibot/core/+/458823/

Restricted Application edited subscribers, added: pywikibot-bugs-list; removed: Liuxinyu970226. · View Herald TranscriptMay 22 2020, 10:15 AM

Looks like this is a general pip problem with transitive dependencies. The pycrypto library is also explcitly mentioned in the requirements.txt file for py-3rdparty-mediawiki. I'll try to release that library on pypi to see if that fixes the issue.

see https://pypi.org/project/py-3rdparty-mediawiki/0.0.2/

pywikibot transitive dependency on cryptoClosed, InvalidPublicBUG REPORTActions

Description

Related Objects

Event Timeline

pywikibot transitive dependency on crypto
Closed, InvalidPublicBUG REPORT
Actions