Re: [Python-Dev] tarfile and directory traversal vulnerability

2007-08-25 Thread Lars Gustäbel
On Fri, Aug 24, 2007 at 07:36:41PM +0200, Jan Matejek wrote: > once upon a time there was a known vulnerability in tar (CVE-2001-1267, > [1]), and while tar is now long fixed, python's tarfile module is > affected too. > > The vulnerability goes basically like this: If you tar a file named > "../.

[Python-Dev] new bug tracker broken?

2007-08-25 Thread Bill Janssen
I've been trying to reset my password on the new RoundUp tracker, and it isn't working. Then I tried to register for a new account, and I got mail from [EMAIL PROTECTED] to confirm. When I did, I got access to a small 27-issue tracker, which seems to be the bug-tracker for the bug-tracker.

Re: [Python-Dev] new bug tracker broken?

2007-08-25 Thread Neal Norwitz
It looks like you found the meta tracker rather than the python one. To reset your password for the main python tracker: http://bugs.python.org/[EMAIL PROTECTED] To report bugs, go here: http://bugs.python.org/ To register a new account, go here: http://bugs.python.org/[EMAIL PROTECTED] N

Re: [Python-Dev] Avoiding cascading test failures

2007-08-25 Thread Gregory P. Smith
On Wed, Aug 22, 2007 at 07:44:02PM -0400, Alexandre Vassalotti wrote: > When I was fixing tests failing in the py3k branch, I found the number > duplicate failures annoying. Often, a single bug, in an important > method or function, caused a large number of testcase to fail. So, I > thought of a si

Re: [Python-Dev] New bug tracker is active now

2007-08-25 Thread Gregory P. Smith
On Thu, Aug 23, 2007 at 10:06:01PM +0200, Erik Forsberg wrote: > "Martin v. L?wis" <[EMAIL PROTECTED]> writes: > > >> When editing my details I saw there is a field for my timezone. The > >> comment says: "this is a numeric hour offset, the default is UTC", so > >> I'm assuming it counts in whole

Re: [Python-Dev] new bug tracker broken?

2007-08-25 Thread skip
Neal> Note, I'm not sure if you have an account, you might need to Neal> register. But try your SF id first. Skip ___ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailman/listinfo/python-dev Unsubscribe: http://mail.pyt

Re: [Python-Dev] Avoiding cascading test failures

2007-08-25 Thread Alexandre Vassalotti
On 8/25/07, Gregory P. Smith <[EMAIL PROTECTED]> wrote: > I like this idea. Yay! Now, I ain't the only one. ;) > Be sure to have an option to ignore dependancies and run all tests. Yes, I planned to add a such option. > Also when skipping tests because a depedancy failed have unittest > print o

[Python-Dev] issue 1024 contains documentation patch for SSL work

2007-08-25 Thread Bill Janssen
I've created the documentation patch for the new SSL module. It's attached to issue 1024. Bill ___ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailman/listinfo/python-dev Unsubscribe: http://mail.python.org/mailman/options/pyth

[Python-Dev] Other SSL issues in the tracker have been marked

2007-08-25 Thread Bill Janssen
I've gone through the other open SSL issues. Looks like some can be closed with the adoption of 1018 and 1024: 1027394 4 months agosocket.ssl should explain that it is a 2/3 connection 889813 4 months agomaking the version of SSL configurable when creating sockets 1583946 9 months ago

Re: [Python-Dev] Other SSL issues in the tracker have been marked

2007-08-25 Thread Neal Norwitz
Bill, Could you also look into this problem: Traceback (most recent call last): File "/home/pybot/buildarea/trunk.klose-debian-ia64/build/Lib/threading.py", line 486, in __bootstrap_inner self.run() File "/home/pybot/buildarea/trunk.klose-debian-ia64/build/Lib/test/test_ssl.py", line 144