Python-dns is used by python-spf and python-formencode.

I wanted to let you know that python-dns has problems with respect to the 
current DNS cache issue.  See 
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217 for details.

Python-dns upstream is going to do a release that will at least provide TID 
randomization.  It's his position though that since python-dns opens a new 
socket for each request, it's the OS job to randomize the port.  2.6.24 will 
do this, but the Etch kernel will not.

So, after upstream is done, I think Lenny/Sid will be OK, but Etch will still 
not have port randomization.  I know nothing about python-formencode's usage 
of python-dns.  Does this present a security risk?

Scott K
Maintainer for python-dns and python-spf

_______________________________________________
Python-modules-team mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/python-modules-team

Reply via email to