Latest Python security fix (2.5.6c1 / 2.6.7rc1)
Hi. I tried installing Python 2.6.7rc1 and got tons of test failures in Zope/Plone. I didn't have time to look into them in more detail, but they looked zope.testbrowser / mechanize related. I'm assuming the same is true for Python 2.5.6c1. If anyone has time to look into this, it would be great. At least be careful with applying the security hotfix to your Python installations. Hanno [1] http://blog.python.org/2011/04/urllib-security-vulnerability-fixed.html
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/09/2011 05:28 AM, Hanno Schlichting wrote:
Hi.
I tried installing Python 2.6.7rc1 and got tons of test failures in Zope/Plone. I didn't have time to look into them in more detail, but they looked zope.testbrowser / mechanize related. I'm assuming the same is true for Python 2.5.6c1.
If anyone has time to look into this, it would be great. At least be careful with applying the security hotfix to your Python installations.
What branch of Zope? I just downloaded 2.6.7rc1, built and installed it, and was able to bootstrap a fresh Zope2 trunk buildout and run all tests without failure. Tres. - -- =================================================================== Tres Seaver +1 540-429-0999 tseaver@palladion.com Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3H9bgACgkQ+gerLs4ltQ4c5gCfSqFFxZokt8bdpH5OBDbHsRT1 n3MAnjb+Om/ENfwWMknX4LV6X/t89ARb =CMv6 -----END PGP SIGNATURE-----
On Mon, May 9, 2011 at 4:10 PM, Tres Seaver <tseaver@palladion.com> wrote:
On 05/09/2011 05:28 AM, Hanno Schlichting wrote:
I tried installing Python 2.6.7rc1 and got tons of test failures in Zope/Plone. I didn't have time to look into them in more detail, but they looked zope.testbrowser / mechanize related. I'm assuming the same is true for Python 2.5.6c1.
If anyone has time to look into this, it would be great. At least be careful with applying the security hotfix to your Python installations.
What branch of Zope? I just downloaded 2.6.7rc1, built and installed it, and was able to bootstrap a fresh Zope2 trunk buildout and run all tests without failure.
Todays buildbot results look a lot like the problems I've seen, for example: http://dev.thehealthagency.com/buildbot/builders/zope2.14-py2.7%20slave-ubun... But zope.testbrowser isn't actually used much in Zope 2 itself and the makesite test above might be the only one. I've witnessed a lot more problems in Plone tests which make ample use of it. Hanno
On Mon, May 9, 2011 at 4:29 PM, Hanno Schlichting <hanno@hannosch.eu> wrote:
On Mon, May 9, 2011 at 4:10 PM, Tres Seaver <tseaver@palladion.com> wrote:
On 05/09/2011 05:28 AM, Hanno Schlichting wrote:
I tried installing Python 2.6.7rc1 and got tons of test failures in Zope/Plone. I didn't have time to look into them in more detail, but they looked zope.testbrowser / mechanize related.
What branch of Zope? I just downloaded 2.6.7rc1, built and installed it, and was able to bootstrap a fresh Zope2 trunk buildout and run all tests without failure.
I tried to reproduce the failures again, but couldn't. Looks like it was something else causing it, probably the same that caused the buildbots to fail for a day. Sorry for the noise, 2.6.7rc1 and 2.6.7rc2 should work fine. Hanno
participants (2)
-
Hanno Schlichting -
Tres Seaver