[Zope-dev] zope.app.wsgi.paste doesn't emit a ProcessStarting event

2012-01-18 Thread Jim Fulton
zope.app.server emits a ProcessStarting event on startup.

zope.app.wsgi.paste doesn't.  I think it should. If there are no
objections, I'll make a bug fix release for this.

BTW, I ended up making a 3.9.3zc1 release (this will spur 3.9.3zc2
release) because the latest release breaks our apps' tests.  Not sure
if this was due to zope.testbrowser 4, or the (until recently)
unreleased zope.app.testing changes needed to work with
zope.testbrowser 4.  I haven't had time to chase these down, thus the
3.9.3zc1 release, which I'm not terribly proud of.

Jim

--
Jim Fulton
http://www.linkedin.com/in/jimfulton
___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] Annoucment: CVE-2010-1104, hotfix, Zope 2.12.22 and 2.13.12 releases

2012-01-18 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Overview


In response to the cross-site scripting vulnerability in Zope2 reported as
'CVE 2010-1104'[1], the Zope security response team announces the
availablility of a hotfix product (for Zope  2.12), and new releases for
the Zope 2.12 and 2.13 lines:

Hotfix:  http://pypi.python.org/pypi/Products.Zope_Hotfix_CVE_2010_1104

Zope 2.12.22:  http://pypi.python.org/pypi/Zope2/2.12.22

Zope 2.13.12:  http://pypi.python.org/pypi/Zope2/2.13.12


WARNING: Zope  2.12 is no longer officially supported, and may have
 other unpatched vulnerabilities. You are encouraged to
 upgrade to a supported Zope 2.


Installing the Hotfix
=

The hotfix has been tested with Zope instances using Zope 2.8.x - 2.11.x.
Users of Zope 2.12.x and 2.13.x should instead update to the latest
corresponding minor revision, which already includes this fix.

Download the tarball from the PyPI page:

 http://pypi.python.org/pypi/Products.Zope_Hotfix_CVE_2010_1104

Unpack the tarball and add a 'products' key to the 'etc/zope.conf' of
your instance.  E.g.::

  products /path/to/Products.Zope_Hotfix_CVE_2010_1104/Products

and restart.  Alternatively, you may copy or symlink the 'Products'
directory into the 'Products' subdirectory of your Zope instance.  E.g.::

  $ cp -r /path/to/Products.Zope_Hotfix_CVE_2010_1104/Products \
/path/to/instance/Products/


Verifying the Installation
- --

After restarting the Zope instance, check the
'Control_Panel/Products' folder in the Zope Management Interface,
e.g.:

  http://localhost:8080/Control_Panel/Products/manage_main

You should see the 'Zope_Hotfix_CVE_2010_1104' product folder there.




[1] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2010-1104



Tres.
- -- 
===
Tres Seaver  +1 540-429-0999  tsea...@palladion.com
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8XSAYACgkQ+gerLs4ltQ4hNgCeIuBeZz2deF95lglP+kiGg66I
YCAAnjiaDBpuB5XD0wAK7WHicxPp1abS
=MsHo
-END PGP SIGNATURE-
___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] zope.app.wsgi.paste doesn't emit a ProcessStarting event

2012-01-18 Thread Marius Gedminas
On Wed, Jan 18, 2012 at 05:00:27PM -0500, Jim Fulton wrote:
 zope.app.server emits a ProcessStarting event on startup.
 
 zope.app.wsgi.paste doesn't.  I think it should.

+1

 If there are no
 objections, I'll make a bug fix release for this.

Hm.  I've an app that wraps zope.app.wsgi like this:

from zope.app.wsgi import getWSGIApplication
from zope.app.appsetup.interfaces import ProcessStarting
from zope.event import notify

def app_factory(global_config, **local_conf):
Create a Zope WSGI application given a zope configuration.

The configuration needs to be specified as the 'config' parameter, e.g. 
in
paster.ini use::

[app:main]
use = egg:ivija
config =
site-definition %(site-definition)s
zodb
  zeoclient
server %(run-directory)s/zeosock
  /zeoclient
/zodb
eventlog
  logfile
formatter zope.exceptions.log.Formatter
path %(log-directory)s/z3.log
  /logfile
  logfile
formatter zope.exceptions.log.Formatter
path STDOUT
  /logfile
/eventlog


app = getWSGIApplication(StringIO(local_conf['config']))
notify(ProcessStarting())
return app

Would this result in duplicate ProcessStarting() events after your proposed
change?  Can duplicate ProcessStarting() events cause harm?  If so, I'd rather
see a bigger version bump than just a bugfix.

(We are pinning all our dependency versions with buildout-versions, so our app
won't break if you rele--oh, I see you already released 3.9.3zc2 with the
change.)

 BTW, I ended up making a 3.9.3zc1 release (this will spur 3.9.3zc2
 release) because the latest release breaks our apps' tests.  Not sure
 if this was due to zope.testbrowser 4, or the (until recently)
 unreleased zope.app.testing changes needed to work with
 zope.testbrowser 4.  I haven't had time to chase these down, thus the
 3.9.3zc1 release, which I'm not terribly proud of.

I'm confused about this.  Latest release refers to what, 3.9.3?  or was there
a newer version that is now hidden on PyPI?

Marius Gedminas
-- 
http://pov.lt/ -- Zope 3/BlueBream consulting and development


signature.asc
Description: Digital signature
___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )


[Zope-dev] zope-tests - FAILED: 7, OK: 58

2012-01-18 Thread Zope tests summarizer
This is the summary for test reports received on the 
zope-tests list between 2012-01-17 00:00:00 UTC and 2012-01-18 00:00:00 UTC:

See the footnotes for test reports of unsuccessful builds.

An up-to date view of the builders is also available in our 
buildbot documentation: 
http://docs.zope.org/zopetoolkit/process/buildbots.html#the-nightly-builds

Reports received


   ZTK 1.0 / Python2.4.6 Linux 64bit
   ZTK 1.0 / Python2.5.5 Linux 64bit
   ZTK 1.0 / Python2.6.7 Linux 64bit
[1]ZTK 1.0dev / Python2.4.6 Linux 64bit
[2]ZTK 1.0dev / Python2.5.5 Linux 64bit
   ZTK 1.0dev / Python2.6.7 Linux 64bit
   ZTK 1.1 / Python2.5.5 Linux 64bit
   ZTK 1.1 / Python2.6.7 Linux 64bit
   ZTK 1.1 / Python2.7.2 Linux 64bit
[3]ZTK 1.1dev / Python2.5.5 Linux 64bit
   ZTK 1.1dev / Python2.6.7 Linux 64bit
   ZTK 1.1dev / Python2.7.2 Linux 64bit
   Zope 3.4 KGS / Python2.4.6 64bit linux
   Zope 3.4 KGS / Python2.5.5 64bit linux
   Zope 3.4 Known Good Set / py2.4-32bit-linux
   Zope 3.4 Known Good Set / py2.4-64bit-linux
   Zope 3.4 Known Good Set / py2.5-32bit-linux
   Zope 3.4 Known Good Set / py2.5-64bit-linux
   Zope Buildbot / zope2.12-py2.6 slave-ubuntu32
   Zope Buildbot / zope2.12-py2.6 slave-ubuntu64
   Zope Buildbot / zope2.13-py2.6 slave-ubuntu32
   Zope Buildbot / zope2.13-py2.6 slave-ubuntu64
   Zope Buildbot / zope2.13-py2.7 slave-ubuntu32
   Zope Buildbot / zope2.13-py2.7 slave-ubuntu64
   Zope Buildbot / zope2.14-py2.6 slave-ubuntu32
   Zope Buildbot / zope2.14-py2.6 slave-ubuntu64
   Zope Buildbot / zope2.14-py2.7 slave-ubuntu32
   Zope Buildbot / zope2.14-py2.7 slave-ubuntu64
   Zope Buildbot / zopetoolkit-1.0-py2.4 slave-ubuntu32
   Zope Buildbot / zopetoolkit-1.0-py2.4 slave-ubuntu64
   Zope Buildbot / zopetoolkit-1.0-py2.5 slave-ubuntu32
   Zope Buildbot / zopetoolkit-1.0-py2.5 slave-ubuntu64
   Zope Buildbot / zopetoolkit-1.0-py2.6 slave-ubuntu32
   Zope Buildbot / zopetoolkit-1.0-py2.6 slave-ubuntu64
   Zope Buildbot / zopetoolkit-1.1-py2.5 slave-ubuntu32
   Zope Buildbot / zopetoolkit-1.1-py2.5 slave-ubuntu64
   Zope Buildbot / zopetoolkit-1.1-py2.6 slave-ubuntu32
   Zope Buildbot / zopetoolkit-1.1-py2.6 slave-ubuntu64
[4]Zope Buildbot / zopetoolkit-py2.5 slave-ubuntu32
[5]Zope Buildbot / zopetoolkit-py2.5 slave-ubuntu64
[6]Zope Buildbot / zopetoolkit-py2.6 slave-ubuntu32
[7]Zope Buildbot / zopetoolkit-py2.6 slave-ubuntu64
   Zope-2.10 Python-2.4.6 : Linux
   Zope-2.11 Python-2.4.6 : Linux
   Zope-2.12 Python-2.6.6 : Linux
   Zope-2.12-alltests Python-2.6.6 : Linux
   Zope-2.13 Python-2.6.6 : Linux
   Zope-2.13-alltests Python-2.6.6 : Linux
   Zope-trunk Python-2.6.6 : Linux
   Zope-trunk-alltests Python-2.6.6 : Linux
   winbot / ZODB_dev py_265_win32
   winbot / ZODB_dev py_265_win64
   winbot / ZODB_dev py_270_win64
   winbot / ztk_10 py_254_win32
   winbot / ztk_10 py_265_win32
   winbot / ztk_10 py_265_win64
   winbot / ztk_11 py_254_win32
   winbot / ztk_11 py_265_win32
   winbot / ztk_11 py_265_win64
   winbot / ztk_11 py_270_win32
   winbot / ztk_11 py_270_win64
   winbot / ztk_dev py_265_win32
   winbot / ztk_dev py_265_win64
   winbot / ztk_dev py_270_win32
   winbot / ztk_dev py_270_win64

Non-OK results
--

[1]FAILED  ZTK 1.0dev / Python2.4.6 Linux 64bit
   https://mail.zope.org/pipermail/zope-tests/2012-January/056277.html


[2]FAILED  ZTK 1.0dev / Python2.5.5 Linux 64bit
   https://mail.zope.org/pipermail/zope-tests/2012-January/056279.html


[3]FAILED  ZTK 1.1dev / Python2.5.5 Linux 64bit
   https://mail.zope.org/pipermail/zope-tests/2012-January/056276.html


[4]FAILED  Zope Buildbot / zopetoolkit-py2.5 slave-ubuntu32
   https://mail.zope.org/pipermail/zope-tests/2012-January/056308.html


[5]FAILED  Zope Buildbot / zopetoolkit-py2.5 slave-ubuntu64
   https://mail.zope.org/pipermail/zope-tests/2012-January/056299.html


[6]FAILED  Zope Buildbot / zopetoolkit-py2.6 slave-ubuntu32
   https://mail.zope.org/pipermail/zope-tests/2012-January/056312.html


[7]FAILED  Zope Buildbot / zopetoolkit-py2.6 slave-ubuntu64
   https://mail.zope.org/pipermail/zope-tests/2012-January/056301.html


___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] zope.app.wsgi.paste doesn't emit a ProcessStarting event

2012-01-18 Thread Michael Howitz
Am 19.01.2012 um 00:50 schrieb Marius Gedminas:
[...]
 I'm confused about this.  Latest release refers to what, 3.9.3?  or was 
 there
 a newer version that is now hidden on PyPI?


Fixed, I unhid the 3.14.0 release additionally to the 3.9.3zc2 one.

Yours sincerely,
-- 
Michael Howitz · m...@gocept.com · software developer
gocept gmbh  co. kg · Forsterstraße 29 · 06112 Halle (Saale) · Germany
http://gocept.com · tel +49 345 1229889 8 · fax +49 345 1229889 1
Python, Pyramid, Plone, Zope - consulting, development, hosting, operations

___
Zope-Dev maillist  -  Zope-Dev@zope.org
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )