Some lintian warnings should be fixed:
W: barbican-common: binary-without-manpage usr/bin/barbican-db-manage
W: barbican-common: binary-without-manpage usr/bin/barbican-keystone-listener
W: barbican-common: binary-without-manpage usr/bin/barbican-retry
W: barbican-common: binary-without-manpage usr/bin/barbican-worker
W: barbican-common: binary-without-manpage usr/bin/pkcs11-kek-rewrap
W: barbican-common: binary-without-manpage usr/bin/pkcs11-key-generation
P: barbican-common: maintainer-script-without-set-e postinst

Not all Build-Depends and binary Depends are in main:

Checking support status of build dependencies...
 * python-ldap3 binary and source package is in universe
 * python-pykmip binary and source package is in universe

Checking support status of binary dependencies...
 * python-ldap3 binary and source package is in universe
 * python-barbican binary and source package is in universe
 * python-pysqlite2 binary and source package is in universe
 * barbican-common binary and source package is in universe
 * uwsgi-core binary and source package is in universe
 * uwsgi-plugin-python binary and source package is in universe
 * barbican-common binary and source package is in universe
 * barbican-common binary and source package is in universe

There's also an open bug in LP:
https://bugs.launchpad.net/ubuntu/+source/barbican/+bug/1526648 its
impact on 16.04 should be investigated.

The above should be fixed or at least there should be documentation on
why they should not (or can't be).

Given that barbican is meant to handle secure storage, sensitive client
secret information, I think this would also benefit from a security
review.

** Changed in: barbican (Ubuntu)
     Assignee: Mathieu Trudel-Lapierre (mathieu-tl) => Ubuntu Security Team 
(ubuntu-security)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1543754

Title:
  [MIR] barbican

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/barbican/+bug/1543754/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to