python-ipalib 4.13.5-1
Python libraries used by IPA
config.json file.
/v1/packages/python-ipalib/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 61890d058c34head | verified | 2026-11-11 02:20 | 7 |
| 8c0938726db0 | verified | 2026-11-05 16:09 | 7 |
| 47dddb4fcb05 | verified | 2026-11-05 16:08 | 7 |
| a9b69bb4514f | verified | 2026-11-05 16:01 | 7 |
Head findings
command-substitution
in
freeipa-client.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local restore=$(_is_restore)
write-outside-build-root
in
freeipa-client.installA write targets a path outside the build root from the package's .install scriptlet - scriptlets run as root under alpm's control, and writing system files is their ordinary purpose.
echo "includedir /var/lib/sss/pubconf/krb5.include.d/" > /etc/krb5.conf.ipanew
write-outside-build-root
in
freeipa-client.installA write targets a path outside the build root from the package's .install scriptlet - scriptlets run as root under alpm's control, and writing system files is their ordinary purpose.
cat /etc/krb5.conf >> /etc/krb5.conf.ipanew
write-outside-build-root
in
freeipa-client.installA write targets a path outside the build root from the package's .install scriptlet - scriptlets run as root under alpm's control, and writing system files is their ordinary purpose.
sed -E 's|(\s*)pkinit_anchors = FILE:/etc/ipa/ca.crt$|\1pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem\n\1pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem|' /etc/krb5.conf >/etc/krb5.conf.ipanew
write-outside-build-root
in
freeipa-client.installA write targets a path outside the build root from the package's .install scriptlet - scriptlets run as root under alpm's control, and writing system files is their ordinary purpose.
python -c 'from ipaclient.install.client import configure_krb5_snippet; configure_krb5_snippet()' >>/var/log/ipaupgrade.log 2>&1
write-outside-build-root
in
freeipa-client.installA write targets a path outside the build root from the package's .install scriptlet - scriptlets run as root under alpm's control, and writing system files is their ordinary purpose.
python -c 'from ipaclient.install.client import update_ipa_nssdb; update_ipa_nssdb()' >>/var/log/ipaupgrade.log 2>&1
local-binary
in
ipaplatform.tar.gzLocal source file 'ipaplatform.tar.gz' is a binary archive - its contents cannot be reviewed as text, but it cannot execute on its own and is versioned in the repository.
ipaplatform.tar.gz
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.