[Python-modules-team] Bug#673987: CVE-2012-2374

2012-05-22 Thread Moritz Muehlenhoff
Package: python-tornado
Severity: grave
Tags: security

Please see http://www.tornadoweb.org/documentation/releases/v2.2.1.html

Cheers,
Moritz



___
Python-modules-team mailing list
Python-modules-team@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team


[Python-modules-team] Bug#673925: Needs python-opengl ported to python3

2012-05-22 Thread Brian Crowell
On Mon, May 21, 2012 at 11:28 PM, Scott Kitterman deb...@kitterman.com wrote:
 For Python, we have python-qt4-gl.  It depends on python-opengl.  Python-
 opengl is not ported to Python 3 yet, so there's no way to support
 PyQt4/QtOpenGL yet.

Thanks for the fast reply, Scott, but I'm not sure I understand. I
thought QtOpenGL and python-opengl were independent wrappers around
OpenGL. QGLWidget provides its own context and drawing operations. In
fact, I finally did have some success this morning building PyQt4 from
sources, and I was able to use the QGLWidget class. (Granted, it was
in C++ SIP-translated code, but it worked.)

I can understand wanting to use python-opengl and QtOpenGL at the same
time, but is one really required for the other?

Thanks!

--Brian



___
Python-modules-team mailing list
Python-modules-team@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team


[Python-modules-team] Bug#673925: Needs python-opengl ported to python3

2012-05-22 Thread Scott Kitterman
The dependency relationship predates my work on the package, so I've assumed 
it's correct.  Perhaps it was a some point and it's not now.  Next time I 
update the package, I can see if I can build this module for Python 3.

signature.asc
Description: This is a digitally signed message part.
___
Python-modules-team mailing list
Python-modules-team@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team

[Python-modules-team] Bug#673987: stable not affected

2012-05-22 Thread Julian Taylor
notfound 673987 1.0.1-1
thanks

the fix is a change of first match search to global search:
re.match(b(r[\x00-\x1f]), value)
to
re.search(b(r[\x00-\x1f]), value)

stable has:
safe_value = re.sub(r[\x00-\x1f],  , value)[:4000]
if safe_value != value:
  raise ValueError(Unsafe header value %r, value)

which should be fine, re.sub works on the whole string.



signature.asc
Description: OpenPGP digital signature
___
Python-modules-team mailing list
Python-modules-team@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team

[Python-modules-team] Processed: stable not affected

2012-05-22 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 notfound 673987 1.0.1-1
Bug #673987 [python-tornado] CVE-2012-2374
Ignoring request to alter found versions of bug #673987 to the same values 
previously set
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
673987: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=673987
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
Python-modules-team mailing list
Python-modules-team@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team