Mailman 3 August 2013 - Python-Dev

Re: [Python-Dev] cpython: Use a known unique object for the dummy entry.
by Antoine Pitrou 19 Aug '13

19 Aug '13

On Sat, 17 Aug 2013 11:32:00 +0200 (CEST) raymond.hettinger <python-checkins(a)python.org> wrote: > http://hg.python.org/cpython/rev/2c9a2b588a89 > changeset: 85218:2c9a2b588a89 > user: Raymond Hettinger <python(a)rcn.com> > date: Sat Aug 17 02:31:53 2013 -0700 > summary: > Use a known unique object for the dummy entry. > > This lets us run PyObject_RichCompareBool() without > first needing to check whether the entry is a dummy. > > files: > Objects/setobject.c | 45 ++++++++++++++------------------ > 1 files changed, 20 insertions(+), 25 deletions(-) This broke test_gdb on several machines: ====================================================================== FAIL: test_sets (test.test_gdb.PrettyPrintTests) Verify the pretty-printing of sets ---------------------------------------------------------------------- Traceback (most recent call last): File "/home/antoine/cpython/default/Lib/test/test_gdb.py", line 319, in test_sets self.assertEqual(gdb_repr, "{'b'}") AssertionError: "{<object at remote 0x7ffff7eed040>, 'b'}" != "{'b'}" - {<object at remote 0x7ffff7eed040>, 'b'} + {'b'} Obviously the pretty-printing of sets isn't able to recognize the dummy from regular set contents, anymore :-) It should be fixable, but I don't know how. Regards Antoine.

4 5

Tracker meta-issue
by Steven D'Aprano 17 Aug '13

17 Aug '13

Is this the right place to request somebody look at an issue in the meta-tracker? http://psf.upfronthosting.co.za/roundup/meta/issue517 Replying to reviews gives an AttributeError exception. This was reported three months ago, and is currently unassigned. Actually, on closer look, it seems to be the same issue as here: http://psf.upfronthosting.co.za/roundup/meta/issue484 which was ten months ago. Thanks, Steven

2 1

Should the default Python 2.7 web page mention 2.7.5 instead of 2.7.2?
by Peter Portante 17 Aug '13

17 Aug '13

See http://www.python.org/download/releases/2.7/ as of Saturday, August 17th, 2013. "Note: A bugfix release, 2.7.2, is currently available<http://www.python.org/download/releases/2.7.2/>. Its use is recommended." Kinds regards, -peter

2 2

Dealing with import lock deadlock in Import Hooks
by Arnaud Fontaine 17 Aug '13

17 Aug '13

[I initially posted this email to python-list but didn't get any reply, probably because this is too related to python core, so I'm posting it again here, hope that's ok...] Hello, I'm currently working on implementing Import Hooks (PEP302) with Python 2.7 to be able to import modules whose code is in ZODB. However, I have stumbled upon a widely known issue about import deadlock[0][1] (note that this issue is not directly related to ZODB, but a more general question about dealing with import lock deadlock for Import Hooks), basically: Thread 1 is trying to import a module 'foo.bar' (where 'foo' is a package containing dynamic modules) handled by Import Hooks I implemented, so import lock is acquired before even running the hooks (Python/import.c:PyImport_ImportModuleLevel()). Then, these import hooks try to load objects from ZODB and a request is sent and handled by another thread (Thread 2) which itself tries to import another module. Of course, this causes a deadlock because the first thread still holds import lock. I have thought about the following solutions: * Backport the patch applied in python 3.3 from issue 9260[0]. This would be the best option because it would mean that even when trying to import any module from package 'foo', other modules and packages can be imported, which would solve my issue. However, I'm not sure it could be released into python 2.7? * Within the hooks, protect the Import Hooks with a separate lock for the loader method. This would prevent any other thread to import any modules from 'foo' package but still allows to call the finder method (ignoring module fullname not starting with 'foo') along with other finder methods, so that other ZODB modules can be imported. Then, in the loader method, until the module is actually inserted into sys.modules and then other load_module() PEP302 responsabilities being taken care of (such as exec the code), release the import lock so that Thread 2 can process requests and send objects back to Thread 1. About the finder method, I think that the separate lock is enough and releasing the import lock until the end of the method should be enough. However, even after trying to understand import.c, I'm not sure this is enough and that releasing import lock would not have nasty side-effects, any thoughts about that? * Fix the ZODB code to not avoid import but to me this seems like a dirty hack because it could happen again and I would prefer to fix this issue once and for all. Any thoughts or suggestion welcome, thanks! Regards, Arnaud Fontaine

5 13

Summary of Python tracker Issues
by Python tracker 16 Aug '13

16 Aug '13

ACTIVITY SUMMARY (2013-08-09 - 2013-08-16) Python tracker at http://bugs.python.org/ To view or respond to any of the issues listed below, click on the issue. Do NOT respond to this message. Issues counts and deltas: open 4152 ( +4) closed 26377 (+56) total 30529 (+60) Open issues with patches: 1896 Issues opened (51) ================== #17477: update the bsddb module do build with db 5.x versions http://bugs.python.org/issue17477 reopened by jcea #18693: help() not helpful with enum http://bugs.python.org/issue18693 reopened by ethan.furman #18697: Unify arguments names in Unicode object C API documentation http://bugs.python.org/issue18697 opened by serhiy.storchaka #18699: What is Future.running() for in PEP 3148 / concurrent.futures. http://bugs.python.org/issue18699 opened by gvanrossum #18701: Remove outdated PY_VERSION_HEX checks http://bugs.python.org/issue18701 opened by serhiy.storchaka #18702: Report skipped tests as skipped http://bugs.python.org/issue18702 opened by serhiy.storchaka #18703: To change the doc of html/faq/gui.html http://bugs.python.org/issue18703 opened by madan.ram #18704: IDLE: PEP8 Style Check Integration http://bugs.python.org/issue18704 opened by JayKrish #18705: Fix typos/spelling mistakes in Lib/*.py files http://bugs.python.org/issue18705 opened by iwontbecreative #18706: test failure in test_codeccallbacks http://bugs.python.org/issue18706 opened by pitrou #18707: the readme should also talk about how to build doc. http://bugs.python.org/issue18707 opened by madan.ram #18709: SSL module fails to handle NULL bytes inside subjectAltNames g http://bugs.python.org/issue18709 opened by christian.heimes #18710: Add PyState_GetModuleAttr http://bugs.python.org/issue18710 opened by pitrou #18711: Add PyErr_FormatV http://bugs.python.org/issue18711 opened by pitrou #18712: Pure Python operator.index doesn't match the C version. http://bugs.python.org/issue18712 opened by mark.dickinson #18713: Enable surrogateescape on stdin and stdout when appropriate http://bugs.python.org/issue18713 opened by ncoghlan #18714: Add tests for pdb.find_function http://bugs.python.org/issue18714 opened by kevinjqiu #18715: Tests fail when run with coverage http://bugs.python.org/issue18715 opened by seydou #18716: Deprecate the formatter module http://bugs.python.org/issue18716 opened by brett.cannon #18717: test for request.urlretrieve http://bugs.python.org/issue18717 opened by mjehanzeb #18718: datetime documentation contradictory on leap second support http://bugs.python.org/issue18718 opened by wolever #18720: Switch suitable constants in the socket module to IntEnum http://bugs.python.org/issue18720 opened by eli.bendersky #18723: shorten function of textwrap module is susceptible to non-norm http://bugs.python.org/issue18723 opened by vajrasky #18725: Multiline shortening http://bugs.python.org/issue18725 opened by serhiy.storchaka #18726: json functions have too many positional parameters http://bugs.python.org/issue18726 opened by serhiy.storchaka #18727: test for writing dictionary rows to CSV http://bugs.python.org/issue18727 opened by mjehanzeb #18728: Increased test coverage for filecmp.py http://bugs.python.org/issue18728 opened by Alex.Volkov #18729: In unittest.TestLoader.discover doc select the name of load_te http://bugs.python.org/issue18729 opened by py.user #18730: suffix parameter in NamedTemporaryFile silently fails when not http://bugs.python.org/issue18730 opened by dloewenherz #18731: Increased test coverage for uu and telnet http://bugs.python.org/issue18731 opened by Alex.Volkov #18733: elementtree: stop the parser more quickly on error http://bugs.python.org/issue18733 opened by haypo #18734: Berkeley DB versions 4.4-4.9 are not discovered by setup.py http://bugs.python.org/issue18734 opened by Eddie.Stanley #18736: Invalid charset in HTML pages inside documentation in CHM form http://bugs.python.org/issue18736 opened by grv87 #18737: Get virtual subclasses of an ABC http://bugs.python.org/issue18737 opened by christian.heimes #18738: String formatting (% and str.format) issues with Enum http://bugs.python.org/issue18738 opened by ethan.furman #18739: math.log of a long returns a different value of math.log of an http://bugs.python.org/issue18739 opened by gregory.p.smith #18741: Fix typos/spelling mistakes in Lib/*/*/.py files http://bugs.python.org/issue18741 opened by iwontbecreative #18742: Abstract base class for hashlib http://bugs.python.org/issue18742 opened by christian.heimes #18743: References to non-existant "StringIO" module http://bugs.python.org/issue18743 opened by jcea #18744: pathological performance using tarfile http://bugs.python.org/issue18744 opened by teamnoir #18745: Test enum in test_json is ignorant of infinity value http://bugs.python.org/issue18745 opened by vajrasky #18746: test_threading.test_finalize_with_trace() fails on FreeBSD bui http://bugs.python.org/issue18746 opened by haypo #18747: Re-seed OpenSSL's PRNG after fork http://bugs.python.org/issue18747 opened by christian.heimes #18748: libgcc_s.so.1 must be installed for pthread_cancel to work http://bugs.python.org/issue18748 opened by ionel.mc #18750: '' % [1] doesn't fail http://bugs.python.org/issue18750 opened by asvetlov #18751: A manager's server never joins its threads http://bugs.python.org/issue18751 opened by pitrou #18752: Make chain.from_iterable an alias for a new chain_iterable. http://bugs.python.org/issue18752 opened by terry.reedy #18753: [c]ElementTree.fromstring fails to parse <value>]]></value> http://bugs.python.org/issue18753 opened by kees #18754: Run Python child processes in isolated mode in the test suite? http://bugs.python.org/issue18754 opened by haypo #18755: imp read functions do not try to re-open files that have been http://bugs.python.org/issue18755 opened by brett.cannon #18756: os.urandom() fails under high load http://bugs.python.org/issue18756 opened by christian.heimes Most recent 15 issues with no replies (15) ========================================== #18755: imp read functions do not try to re-open files that have been http://bugs.python.org/issue18755 #18752: Make chain.from_iterable an alias for a new chain_iterable. http://bugs.python.org/issue18752 #18751: A manager's server never joins its threads http://bugs.python.org/issue18751 #18746: test_threading.test_finalize_with_trace() fails on FreeBSD bui http://bugs.python.org/issue18746 #18745: Test enum in test_json is ignorant of infinity value http://bugs.python.org/issue18745 #18741: Fix typos/spelling mistakes in Lib/*/*/.py files http://bugs.python.org/issue18741 #18736: Invalid charset in HTML pages inside documentation in CHM form http://bugs.python.org/issue18736 #18733: elementtree: stop the parser more quickly on error http://bugs.python.org/issue18733 #18731: Increased test coverage for uu and telnet http://bugs.python.org/issue18731 #18730: suffix parameter in NamedTemporaryFile silently fails when not http://bugs.python.org/issue18730 #18729: In unittest.TestLoader.discover doc select the name of load_te http://bugs.python.org/issue18729 #18714: Add tests for pdb.find_function http://bugs.python.org/issue18714 #18711: Add PyErr_FormatV http://bugs.python.org/issue18711 #18701: Remove outdated PY_VERSION_HEX checks http://bugs.python.org/issue18701 #18697: Unify arguments names in Unicode object C API documentation http://bugs.python.org/issue18697 Most recent 15 issues waiting for review (15) ============================================= #18754: Run Python child processes in isolated mode in the test suite? http://bugs.python.org/issue18754 #18747: Re-seed OpenSSL's PRNG after fork http://bugs.python.org/issue18747 #18746: test_threading.test_finalize_with_trace() fails on FreeBSD bui http://bugs.python.org/issue18746 #18745: Test enum in test_json is ignorant of infinity value http://bugs.python.org/issue18745 #18743: References to non-existant "StringIO" module http://bugs.python.org/issue18743 #18742: Abstract base class for hashlib http://bugs.python.org/issue18742 #18741: Fix typos/spelling mistakes in Lib/*/*/.py files http://bugs.python.org/issue18741 #18739: math.log of a long returns a different value of math.log of an http://bugs.python.org/issue18739 #18738: String formatting (% and str.format) issues with Enum http://bugs.python.org/issue18738 #18737: Get virtual subclasses of an ABC http://bugs.python.org/issue18737 #18731: Increased test coverage for uu and telnet http://bugs.python.org/issue18731 #18729: In unittest.TestLoader.discover doc select the name of load_te http://bugs.python.org/issue18729 #18728: Increased test coverage for filecmp.py http://bugs.python.org/issue18728 #18727: test for writing dictionary rows to CSV http://bugs.python.org/issue18727 #18723: shorten function of textwrap module is susceptible to non-norm http://bugs.python.org/issue18723 Top 10 most discussed issues (10) ================================= #18738: String formatting (% and str.format) issues with Enum http://bugs.python.org/issue18738 49 msgs #18720: Switch suitable constants in the socket module to IntEnum http://bugs.python.org/issue18720 18 msgs #18606: Add statistics module to standard library http://bugs.python.org/issue18606 12 msgs #18710: Add PyState_GetModuleAttr http://bugs.python.org/issue18710 10 msgs #18693: help() not helpful with enum http://bugs.python.org/issue18693 9 msgs #18706: test failure in test_codeccallbacks http://bugs.python.org/issue18706 9 msgs #18723: shorten function of textwrap module is susceptible to non-norm http://bugs.python.org/issue18723 9 msgs #18747: Re-seed OpenSSL's PRNG after fork http://bugs.python.org/issue18747 9 msgs #8713: multiprocessing needs option to eschew fork() under Linux http://bugs.python.org/issue8713 8 msgs #18647: re.error: nothing to repeat http://bugs.python.org/issue18647 8 msgs Issues closed (54) ================== #3526: Customized malloc implementation on SunOS and AIX http://bugs.python.org/issue3526 closed by pitrou #6132: Implement the GIL with critical sections in Windows http://bugs.python.org/issue6132 closed by pitrou #8112: xmlrpc.server: ServerHTMLDoc.docroutine uses (since 3.0) depre http://bugs.python.org/issue8112 closed by r.david.murray #12015: possible characters in temporary file name is too few http://bugs.python.org/issue12015 closed by python-dev #12075: python3.2 memory leak when reloading class with attributes http://bugs.python.org/issue12075 closed by pitrou #12645: test.support. import_fresh_module - incorrect doc http://bugs.python.org/issue12645 closed by python-dev #13647: Python SSL stack doesn't securely validate certificate (as cli http://bugs.python.org/issue13647 closed by pitrou #15581: curses: segfault in addstr() http://bugs.python.org/issue15581 closed by haypo #16499: CLI option for isolated mode http://bugs.python.org/issue16499 closed by christian.heimes #17701: Improving strftime documentation http://bugs.python.org/issue17701 closed by wolever #18090: dict_contains first argument declared register, and shouldn't http://bugs.python.org/issue18090 closed by larry #18121: antigravity leaks subprocess.Popen object http://bugs.python.org/issue18121 closed by pitrou #18226: IDLE Unit test for FormatParagrah.py http://bugs.python.org/issue18226 closed by terry.reedy #18264: enum.IntEnum is not compatible with JSON serialisation http://bugs.python.org/issue18264 closed by python-dev #18268: ElementTree.fromstring non-deterministically gives unicode tex http://bugs.python.org/issue18268 closed by eli.bendersky #18296: test_os.test_trailers() is failing on AMD64 FreeBSD 9.0 dtrace http://bugs.python.org/issue18296 closed by haypo #18367: See if a venv setup can be used for devinabox for coverage http://bugs.python.org/issue18367 closed by brett.cannon #18405: crypt.mksalt() result has unnecessarily low entropy http://bugs.python.org/issue18405 closed by haypo #18425: IDLE Unit test for IdleHistory.py http://bugs.python.org/issue18425 closed by terry.reedy #18451: Omit test files in devinabox coverage run http://bugs.python.org/issue18451 closed by brett.cannon #18453: There are unused variables inside DateTimeTestCase class in te http://bugs.python.org/issue18453 closed by ezio.melotti #18465: There are unused variables and unused import in Lib/test/test_ http://bugs.python.org/issue18465 closed by ezio.melotti #18483: Add hour-24 type of time to test_http2time_formats in test_htt http://bugs.python.org/issue18483 closed by ezio.melotti #18484: No unit test for iso2time function from http.cookiejar module http://bugs.python.org/issue18484 closed by ezio.melotti #18501: _elementtree.c calls Python callbacks while a Python exception http://bugs.python.org/issue18501 closed by haypo #18505: Duplicate function names in test_email.py http://bugs.python.org/issue18505 closed by ezio.melotti #18516: Typos in Lib/email/generator.py and Lib/email/architecture.rst http://bugs.python.org/issue18516 closed by ezio.melotti #18579: Dereference after NULL check in listobject.c merge_hi() http://bugs.python.org/issue18579 closed by christian.heimes #18585: Add a text truncation function http://bugs.python.org/issue18585 closed by pitrou #18598: Importlib, more verbosity please http://bugs.python.org/issue18598 closed by brett.cannon #18600: email.policy doc example passes 'policy' to as_string, but tha http://bugs.python.org/issue18600 closed by r.david.murray #18609: test_ctypes failure on AIX in PyEval_CallObjectWithKeywords http://bugs.python.org/issue18609 closed by haypo #18655: GUI apps take long to launch on Windows http://bugs.python.org/issue18655 closed by terry.reedy #18660: os.read behavior on Linux http://bugs.python.org/issue18660 closed by benjamin.peterson #18663: In unittest.TestCase.assertAlmostEqual doc specify the delta d http://bugs.python.org/issue18663 closed by ezio.melotti #18667: missing HAVE_FCHOWNAT http://bugs.python.org/issue18667 closed by larry #18673: Add O_TMPFILE to os module http://bugs.python.org/issue18673 closed by christian.heimes #18676: Queue: document that zero is accepted as timeout value http://bugs.python.org/issue18676 closed by terry.reedy #18680: JSONDecoder should document that it raises a ValueError for ma http://bugs.python.org/issue18680 closed by wolever #18681: typo in imp.reload http://bugs.python.org/issue18681 closed by ezio.melotti #18687: Lib/test/leakers/test_ctypes.py still mentions the need to upd http://bugs.python.org/issue18687 closed by ezio.melotti #18689: add argument for formatter to logging.Handler and subclasses i http://bugs.python.org/issue18689 closed by vinay.sajip #18696: In unittest.TestCase.longMessage doc remove a redundant senten http://bugs.python.org/issue18696 closed by ezio.melotti #18698: importlib.reload() does not return the module in sys.modules http://bugs.python.org/issue18698 closed by eric.snow #18700: test_cgi raises ResourceWarning http://bugs.python.org/issue18700 closed by madison.may #18708: Change required in python 3.4 interpretor . http://bugs.python.org/issue18708 closed by mark.dickinson #18719: Remove false optimization for equality comparison of hashed st http://bugs.python.org/issue18719 closed by rhettinger #18721: test for FTP cwd function http://bugs.python.org/issue18721 closed by orsenthil #18722: Remove uses of the register keyword http://bugs.python.org/issue18722 closed by pitrou #18724: Typo in docs.python.org: smtplib python2.7 http://bugs.python.org/issue18724 closed by ned.deily #18732: IdleHistory.History: eliminate unused parameter; other cleanup http://bugs.python.org/issue18732 closed by terry.reedy #18735: SSL/TLS pinning for the ssl module http://bugs.python.org/issue18735 closed by raymontag #18740: str is number methods don't recognize '.' http://bugs.python.org/issue18740 closed by brett.cannon #18749: [issue 18606] Re: Add statistics module to standard library http://bugs.python.org/issue18749 closed by ezio.melotti

1 0

PEP 452 API for Cryptographic Hash Functions v2.0
by Christian Heimes 15 Aug '13

15 Aug '13

Hello, I have written a revised version of PEP 247. It's heavily based on AMKs original version from 2001. Version 2.0 adds ``name`` and ``block_size`` as mandatory attributes. It defines that hashing objects operate only on byte-like objects in Python 3.x, too. I have also developed an abstract base class for cryptographic hashing algorithm [1]. Should I add it to the PEP and make it mandatory for Python 3.4+? Regards, Christian [1] http://bugs.python.org/issue18742

1 0

Issue 13248: 3.4 Removals?
by Terry Reedy 15 Aug '13

15 Aug '13

Related to the current deprecation discussion: http://bugs.python.org/issue13248 This is a master list of deprecated items scheduled for removal in 3.4. Anything that is going to be removed should be done now, before the next alpha, methinks. -- Terry Jan Reedy

1 0

Guidance regarding tests for the standard lib
by Steven D'Aprano 14 Aug '13

14 Aug '13

Hi, I have raise a tracker item and PEP for adding a statistics module to the standard library: http://bugs.python.org/issue18606 http://www.python.org/dev/peps/pep-0450/ and I'm about to submit a patch containing my updated code and tests, but I've run into a problem with testing. My existing tests use unittest, and follow the basic boilerplate documented here: http://docs.python.org/3/library/test.html and when run directly they pass, but when I try to run them using Python 3.4a -m test -j3 they break. My question is, is it acceptable to post the code and tests to the tracker as-is, and ask for a pronouncement on the PEP first, and then fix the test breakage later? If not, can somebody mentor me in understanding what I need to do here? To avoid all doubt, the tests pass if I call them like this: ./python Lib/test/test_statistics.py but raise errors when I call them like this: ./python -m test -j3 Thanks in advance, -- Steven

5 5

SSL issues in Python stdlib and 3rd party code
by Christian Heimes 13 Aug '13

13 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, last week Ryan Sleevi of the Google Chrome Security Team has informed us about about two issues in Python's SSL module. I already new about the cause of the first bug and suspected that our SSL module suffers from the second bug but I was unable to prove it. Both issues are security issues but their impact is limited if you trust only trustworthy root certification authorities. Any decent root CA would should not sign a malicious cert with NULL bytes in a subjectAltName dNSName field or with wildcards like *.*.com. By the way if you are using the cacert.pem from curl, please update your bundle ASAP. I have found a bug in its Mozilla certdata parser, too. bug #1: ssl.match_hostname() wildcard matching - ---------------------------------------------- ssl.match_hostname() doesn't implement RFC 6125 wildcard matching rules. Affected versions: - - Python 3.2 (< 3.2.5) - - Python 3.3 (< 3.3.3) - - Python 3.4a1 - - requests < 1.2.3 https://pypi.python.org/pypi/requests - - backports.ssl_match_hostname (<3.2a3) https://pypi.python.org/pypi/backports.ssl_match_hostname/ - - urllib3 < 1.6 https://github.com/shazow/urllib3 Bug reports: http://bugs.python.org/issue17997 https://github.com/kennethreitz/requests/issues/1528 https://bitbucket.org/brandon/backports.ssl_match_hostname/issue/2/match_ho… Patch: http://bugs.python.org/issue17997 has a preliminary patch. The handling of IDN A-labels is still a bit controversial, though. bug #2 failure to handle NULL bytes in subjectAltName - ----------------------------------------------------- It's basically the same issue as CVE-2013-4073. Python uses GENERAL_NAME_print() to turn a GERNAL_NAME entry into a C string. But GENERAL_NAME_print() doesn't handle embedded NULL bytes in ASN1_STRINGs correctly. You can read more about the issue at http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulner… Affected versions: - - Python 2.6 (< 2.6.8) - - Python 2.7 (< 2.7.5) - - Python 3.2 (< 3.2.5) - - Python 3.3 (< 3.3.3) - - Python 3.4a1 - - PyOpenSSL < 0.13 https://pypi.python.org/pypi/pyOpenSSL - - eGenix.com pyOpenSSL Distribution with PyOpenSSL < 0.13 https://pypi.python.org/pypi/M2Crypto - - M2Crypto < 0.21.1 http://www.egenix.com/products/python/pyOpenSSL/ Bug report: http://bugs.python.org/issue18709 Patches: http://bugs.python.org/issue18709 has patches for 2.7, 3.3 and default https://code.launchpad.net/~heimes/pyopenssl/pyopenssl/+merge/179673 Jean-Paul Calderone is going to release 0.13.1 soonish. It's going to contain just my fix for the issue. Marc-Andre Lemburg will build a new version of eGenix.com pyOpenSSL Distribution shortly after. I'm not going to work on a patch for M2Crypto as I don't understand SWIG. I have contacted Heikki Toivonen for M2Crypto but haven't heard back from him yet. related issue: Mozilla's certdata.txt and CKT_NSS_MUST_VERIFY_TRUST - ------------------------------------------------------------------- Recently I found bugs in curl's mk-ca-bundle.pl script, its cacert.pem and in the CA bundle of eGenix.com pyOpenSSL Distribution. Both failed to handle a new option in Mozilla's certdata.txt database correctly. As a consequence the root CA bundles contained additionally and untrustworthy root certificates. I'm not sure about the severity of the issue. Curl has already fixed its script week ago. Marc-Andre Lemburg is going to release a new distribution very soon. https://github.com/bagder/curl/commit/51f0b798fa http://curl.haxx.se/docs/caextract.html Background information: https://www.imperialviolet.org/2012/01/30/mozillaroots.html http://lists.debian.org/debian-release/2012/11/msg00411.html http://p11-glue.freedesktop.org/doc/storing-trust-policy/storing-trust-exis… I like to thank Ryan Sleevi (Google), Chris Palmer (Google), Marc-Andre Lemburg (eGenix.com, Python core dev), Jean-Paul Calderone (PyOpenSSL), Antoine Pitrou (Python core dev), Daniel Stenberg (curl), Günter Knauf (curl) and everybody else who was involved in reporting and fixing these issues. Regards, Christian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCgAGBQJSCRjUAAoJEMeIxMHUVQ1F81UP/R8RqAFR3cODI4SgFzmvOSXa u5OHfdQcgVfQbs5+oeZgqBu5aQ2W4SHKd/wSqCCrB1CbsZDZu9Y5LRVo/MgKMuNs /c49FAyNKGUPc04RtBPfjSQ8GWlk4ziayW9PAuziBGD+ExMlSzXk1CwRwPJVPMkA 8xV48QThT4U5L1WRS4AH3XdgIpPWwJswNCuw9KjlIP/b1LZIrVvUg9rb4azVf0qu Am9IlCwIb2sMNQU1s+sADht6B3Ka4tC8ej8VoWHnTEh8T8RJgcG3j3P2GFPx0YzD 35ISU6k/Dg/dEIJjawI7Uk+dXqxhMfCWFz5Yoy7TaUtYTFAFISqys88+I/H3PxNV mewUNdRFO9ej2vyikI8s1FwGVaORYEIVtkOKzLRa7mc5ZEdh6MjZ2l3bH2GszO+J mRzDwQjipnp8NwOjn9eipdKNaywFoGnDmoydxf3w9Qq6MPsdSiqtBHPWRP5K+091 rM+49v0MAenvxtkb8IJsBbSzVMs66uwfRYl1KYyvXNpGb4TSH/GlrUqRqaX97NW2 x1NprclxVWri5/kWnV4YvqJ6OmDcigCVI780+rQFSoqMk4JKDUgUsl451KvB4ATL 5OfZ9VaVhXu6Ydrjb3bRZHuKGeRsSH7JQCURFzWiriQEGwQAg/9D19JLli6YpCBZ a5dEBzj4FAVglJEYlsZ2 =Jq/C -----END PGP SIGNATURE-----

3 3

Re: [Python-Dev] [Python-checkins] cpython (merge 2.7 -> 2.7): Clean merge
by Ezio Melotti 12 Aug '13

12 Aug '13

2 1