[Python-modules-team] Bug#673987: CVE-2012-2374

2012-05-22 Thread Moritz Muehlenhoff
Package: python-tornado Severity: grave Tags: security Please see http://www.tornadoweb.org/documentation/releases/v2.2.1.html Cheers, Moritz ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org

[Python-modules-team] Bug#673925: Needs python-opengl ported to python3

2012-05-22 Thread Brian Crowell
On Mon, May 21, 2012 at 11:28 PM, Scott Kitterman deb...@kitterman.com wrote: For Python, we have python-qt4-gl.  It depends on python-opengl.  Python- opengl is not ported to Python 3 yet, so there's no way to support PyQt4/QtOpenGL yet. Thanks for the fast reply, Scott, but I'm not sure I

[Python-modules-team] Bug#673925: Needs python-opengl ported to python3

2012-05-22 Thread Scott Kitterman
The dependency relationship predates my work on the package, so I've assumed it's correct. Perhaps it was a some point and it's not now. Next time I update the package, I can see if I can build this module for Python 3. signature.asc Description: This is a digitally signed message part.

[Python-modules-team] Bug#673987: stable not affected

2012-05-22 Thread Julian Taylor
notfound 673987 1.0.1-1 thanks the fix is a change of first match search to global search: re.match(b(r[\x00-\x1f]), value) to re.search(b(r[\x00-\x1f]), value) stable has: safe_value = re.sub(r[\x00-\x1f], , value)[:4000] if safe_value != value: raise ValueError(Unsafe header value %r,

[Python-modules-team] Processed: stable not affected

2012-05-22 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: notfound 673987 1.0.1-1 Bug #673987 [python-tornado] CVE-2012-2374 Ignoring request to alter found versions of bug #673987 to the same values previously set thanks Stopping processing here. Please contact me if you need assistance. -- 673987: