Twisted September 2014

twisted@python.org

36 participants
36 discussions

Start a nNew thread

[Twisted-Python] Weekly Bug Summary

by trac＠twistedmatrix.com

7 years, 2 months

[Twisted-Python] Security Advisory: bash remote code execution

by Alex Gaynor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Today a security release of Bash was issued, fixing a critical vulnerability. This vulnerability allows an attacker to inject and execute arbitrary code on many web servers and other applications. This issue does not affect Twisted directly, but will affect many users of Twisted. Any web server which is serving traffic over a CGI or CGI-like interface (including WSGI) should upgrade its version of Bash immediately. This issue has been assigned CVE-2014-6271. A complete description of the bug is also available: http://seclists.org/oss- sec/2014/q3/650 New packages have been issued for the following operating systems: * Debian: http://www.debian.org/security/2014/dsa-3032 * Ubuntu: http://www.ubuntu.com/usn/usn-2362-1/ * Red Hat Enterprise Linux: https://rhn.redhat.com/errata/RHSA-2014-1293.html Please be aware that there are reports that the current patches do not completely solve the issue, it is likely that users will need to perform updates a second time. Sincerely, Alex Gaynor -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUI30jAAoJEBJfXGff6UCEQfkQAIi36kVAmGimqiKeqgpbTX5F Z9TRMIhwVtZBtohQXj34QB+y382ArzLXve6toaj0si7lbQN0KnqOqsCyhJ5magxp ZtX/6ZDYcrgRM07sP+JVS+OO5YZnrH/EjfcxKA6kyDk2Rbs7rq21EHuw13HaS1Xo cPiusCM8XIhWZ9Fv8H1fSF7VkXb791kQJGMgcivvww3Z9+WltNbIuDOc57iuXIQ8 AnOxGkGcJL0qQHYkBYqXQejFNBMy0JZNE15ORyep7rYjDvCVacCfOyfjyd9kqpTt QHomR1XdMhZBffpygKbHnJ7wIyFcG0eQMwJxsX8gelmevvVwMmGC+qbmN4R+h1F6 HoSe0y5JHRNFgk3ClKBFgJtD1PB4Jrxl2YqCr+EyzwaQERzSes0bCGy4D1/VVn/Z JWoedrFl7R/pf+DAD/krTA0fVbfDprhlvc4c72p94m0h2xzgcI3RCHT+ZopyIMW8 7Fw0hawx8366m1E0RZBJsi/zvq8Eq/WhVbeTl2C9Vqgg3yE+DUvg6a65y78yXUN4 wgOzI/34ZHQbTll4wRBabllR7yU/WFCLJE95TTS5QIXhikzkd+T7MjiqeSSfEIfZ 55XFvKy1Z2AM/USozvLfwM5siCn+r2o3BmQ97Wm5i0YTbrJqUW2KFSM0xZp3YBQc ryYFOFCmIfZpjPEIheqD =oBm7 -----END PGP SIGNATURE-----

7 years, 2 months

[Twisted-Python] advice sought - two database connections in a RunInteraction (adbapi.ConnectionPool)

by Jonathan Vanasco

I've got some database transactional code running within a thread via RunInteraction (it needs to rollback on error). One of the features on the logic is that it interacts with a 3rd party API, which may or may not have a ratelimit in effect. Most 3rd party APIs i consume have a minute/hourly based limit -- so I just do a graceful fail on the transaction to requeue it, and set a local timeout. This particular API has a per-second meter in effect. It is considerably more efficient to just sleep for a second and "try again" a second later. I end up being able to process over twice as many API calls in a given period with that strategy. The problem I ran into, is that I need a second database connection to note that a ratelimit has been created in the database -- and i'd like to pull that db connection out of the twisted connection pool to simplify my connection management. - I can't do it within the existing connection, because I am in a transaction and the limit won't appear to other twisted jobs. - I can't use runInteraction() off the pool, because that will defer to a thread and I am in a thread, and the last time I did something like that... everything broke. - the stopgap I have right now is just creating/closing a raw pscycopg2 connection and using that. it works, but it requires a bit more management of postgres to ensure I can balance the right number of connections. has anyone had a need like this before? if so, what did you do? i basically just need to make two "INSERT" statements from a second connection.

7 years, 2 months

[Twisted-Python] GPRS/Modem protocol through USB support

by Simon Andrieu

Hi, I work for a company that develops telemetry boxes, and that uses the Twisted framework running on the main board. It is planned to integrate a cellular module connected via USB or serial link to the main board. Could you help me to know if GPRS/3G/Modem protocols through USB are supported with Twisted please? And how it is possible to use this interface? Thanks for your help. Best Regards, Simon Andrieu

7 years, 2 months

[Twisted-Python] On testing things wrapping other things

by weykent

Hi, Recently I worked on refactoring a project so that it was, in my opinion, more testable. For reference, the diff is available at <https://github.com/Weasyl/txyam/compare/Weasyl:9230b7d09c1413a09d776700f26a…>, and the important parts in the changed version are at <https://github.com/Weasyl/txyam/blob/cdf7aef9e3425f27016f8e97c59bd2143fbf80…>. My question: is this a good factoring for testing a wrapper? It seems to make sense to split apart crafting and issuing requests to clients, as it lets you test the contents of a request to see what will happen instead of having to issue the request and test that its effects happened. On a previous iteration of this project, I wrote tests that did exactly that: issued requests and checked the bytes that were sent to a StringTransport. Those tests ended up being harder to read and write, and seemed to rely on the exact implementation of the thing I was wrapping. Thanks in advance for any feedback on the matter, ~weykent

7 years, 2 months

[Twisted-Python] natty64-py2.7maint & twistedchecker builders

by exarkun＠twistedmatrix.com

Hello, These two builders appear to be having problems. See, for example: https://buildbot.twistedmatrix.com/builders/natty64-py2.7maint/builds/4193 https://buildbot.twistedmatrix.com/builders/twistedchecker/builds/2229 Jean-Paul

7 years, 2 months

[Twisted-Python] Weekly Bug Summary

by trac＠twistedmatrix.com

7 years, 2 months

[Twisted-Python] are there known ssl/threading/socket issues with httplib2/httplib and Twisted ?

by Jonathan Vanasco

Background: I'm using a 3rd party API client, which uses httplib2 in the internals. ( the google-plus api ) I'm placing this blocking code within a DeferredList, that runs within a twisted.enterprise.adbapi.ConnectionPool.runInteraction In my initial tests, everything worked fine -- but I was only making a single GET/POST, as I kept the size of the DeferredList to 1 while I worked on the code. As soon as I increased the limit and had 2 GET/POST events firing off at the same time, I started getting a ssl/socket error ( httplib2 > httplib > socket > ssl ). It works fine in twisted if I make simultaneous requests otherwise (using twisted or the `requests` package). this seems to be tied to how httplib2/httplib is running within twisted. Has anyone experienced this before? if so, do you know if there is a workaround? The easiest fix, is probably for me to write a new ApiClient tomorrow for the methods I need. I'd just like to avoid that if possible

7 years, 2 months

[Twisted-Python] Twisted 14.0.1 Release Announcement

by HawkOwl

On behalf of Twisted Matrix Laboratories, I’m releasing Twisted 14.0.1, a security release for Twisted 14.0. It is strongly suggested that users of 14.0.0 upgrade to this release. This patches a bug in Twisted Web’s Agent, where BrowserLikePolicyForHTTPS would not honour the trust root given, and would use the system trust root instead. This would have broken, for example, attempting to pin the issuer for your HTTPS application because you only trust one issuer. Note: on OS X, with the system OpenSSL, you still can't fully rely on this API for issuer pinning, due to modifications by Apple — please see <https://hynek.me/articles/apple-openssl-verification-surprises/> for more details. You can find the downloads at <https://pypi.python.org/pypi/Twisted> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads>). The NEWS file is also available at <https://twistedmatrix.com/trac/browser/tags/releases/twisted-14.0.1/NEWS?fo…>. Thanks for Alex Gaynor for discovering the bug, Glyph & Alex for developing a patch, and David Reid for reviewing it. Twisted Regards, HawkOwl

7 years, 2 months

[Twisted-Python] Weekly Bug Summary

by trac＠twistedmatrix.com

7 years, 2 months

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

Twisted September 2014