zope and python compatibility
Greetings zope-dev folks, Please help me out. I have seen below via google search: Zope 2.5 + Python 2.1 --> Good Zope 2.6 + Python 2.1 --> Good Zope 2.7 + Python 2.1 --> Bad Zope 2.5 + Python 2.2 --> Bad Zope 2.6 + Python 2.2 --> Bad Zope 2.7 + Python 2.2 --> Good This article/note was from September, 2002. Can someone please comment if the data above is still valid? Thank you. Tena Sakai (tena.sakai.b@bayer.com)
Tena Sakai writes:
Greetings zope-dev folks,
Please help me out.
I have seen below via google search:
Zope 2.5 + Python 2.1 --> Good Zope 2.6 + Python 2.1 --> Good Zope 2.7 + Python 2.1 --> Bad Zope 2.5 + Python 2.2 --> Bad Zope 2.6 + Python 2.2 --> Bad Zope 2.7 + Python 2.2 --> Good
This article/note was from September, 2002. Can someone please comment if the data above is still valid?
The information about the required python version should be in the README.txt file in the root directory of the Zope installation. If You check this file You will find that nothing had changed since September 2002. Cheers, Clemens
On Thursday, January 9, 2003, at 10:06 AM, Tena Sakai wrote:
Greetings zope-dev folks,
Please help me out.
I have seen below via google search:
Zope 2.5 + Python 2.1 --> Good Zope 2.6 + Python 2.1 --> Good Zope 2.7 + Python 2.1 --> Bad Zope 2.5 + Python 2.2 --> Bad Zope 2.6 + Python 2.2 --> Bad Zope 2.7 + Python 2.2 --> Good
This article/note was from September, 2002. Can someone please comment if the data above is still valid?
To my knowledge it is, although I recall reading that Zope 2.6.1 is intended to be Python 2.2 "compatible" - not breaking, but not requiring any Python 2.2 features. 2.6.1 is supposed to have its second beta soon. I suppose I should give the first beta a test against Python 2.2 to see how it goes. 2.6.1b1's been solid under Python 2.1.3, at least on our development box. Jeffrey P Shell, jeffrey@cuemedia.com
This is right although it's been reported that Zope 2.6 works with Python 2.2 with no detected problems (so far). ----- Original Message ----- From: "Tena Sakai" <tena.sakai.b@bayer.com> To: <zope-dev@zope.org> Sent: Thursday, January 09, 2003 12:06 PM Subject: [Zope-dev] zope and python compatibility
Greetings zope-dev folks,
Please help me out.
I have seen below via google search:
Zope 2.5 + Python 2.1 --> Good Zope 2.6 + Python 2.1 --> Good Zope 2.7 + Python 2.1 --> Bad Zope 2.5 + Python 2.2 --> Bad Zope 2.6 + Python 2.2 --> Bad Zope 2.7 + Python 2.2 --> Good
This article/note was from September, 2002. Can someone please comment if the data above is still valid?
Thank you.
Tena Sakai (tena.sakai.b@bayer.com)
_______________________________________________ Zope-Dev maillist - Zope-Dev@zope.org http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
On Thu, 2003-01-09 at 15:06, Tena Sakai wrote:
[...]
Zope 2.5 + Python 2.1 --> Good Zope 2.6 + Python 2.1 --> Good Zope 2.7 + Python 2.1 --> Bad Zope 2.5 + Python 2.2 --> Bad Zope 2.6 + Python 2.2 --> Bad Zope 2.7 + Python 2.2 --> Good
This article/note was from September, 2002. Can someone please comment if the data above is still valid?
Yes, it is. It is possible to run 2.6 under Python 2.2, but it's unsupported -- Ideas don't stay in some minds very long because they don't like solitary confinement.
Leonardo Rochael Almeida wrote It is possible to run 2.6 under Python 2.2, but it's unsupported
Note that you'll need 2.2.2. 2.2 and 2.2.1 have bugs that Zope triggers. -- Anthony Baxter <anthony@interlink.com.au> It's never too late to have a happy childhood.
I would strongly recommend using python version 2.1.3 for Zope 2.5.1 - 2.6.x and python >= 2.2.2 for Zope > 2.6.x. Adam On Thu, 2003-01-09 at 12:06, Tena Sakai wrote:
Greetings zope-dev folks,
Please help me out.
I have seen below via google search:
Zope 2.5 + Python 2.1 --> Good Zope 2.6 + Python 2.1 --> Good Zope 2.7 + Python 2.1 --> Bad Zope 2.5 + Python 2.2 --> Bad Zope 2.6 + Python 2.2 --> Bad Zope 2.7 + Python 2.2 --> Good
This article/note was from September, 2002. Can someone please comment if the data above is still valid?
Thank you.
Tena Sakai (tena.sakai.b@bayer.com)
_______________________________________________ Zope-Dev maillist - Zope-Dev@zope.org http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
Zope 2.5 + Python 2.1 --> Good Zope 2.6 + Python 2.1 --> Good Zope 2.7 + Python 2.1 --> Bad Zope 2.5 + Python 2.2 --> Bad Zope 2.6 + Python 2.2 --> Bad Zope 2.7 + Python 2.2 --> Good
I'm beginning to wonder whether Zope 2.7 shouldn't require Python 2.1.3 rather than 2.2.2. The original motivation for requiring 2.2.x was to allow easy backporting of Zope 3 components, and that is no longer a goal. I've asked Brian to review the version decision in this light. --Guido van Rossum (home page: http://www.python.org/~guido/)
I'm beginning to wonder whether Zope 2.7 shouldn't require Python 2.1.3 rather than 2.2.2. The original motivation for requiring 2.2.x was to allow easy backporting of Zope 3 components, and that is no longer a goal. I've asked Brian to review the version decision in this light.
Without python 2.2 zope will continue to harbor remotely exploitable zlib-based memory exhaustion attacks. FWIW -- Jamie Heilman http://audible.transient.net/~jamie/ "We must be born with an intuition of mortality. Before we know the words for it, before we know there are words, out we come bloodied and squalling with the knowledge that for all the compasses in the world, there's only one direction, and time is its only measure." -Rosencrantz
Without python 2.2 zope will continue to harbor remotely exploitable zlib-based memory exhaustion attacks. FWIW
Can you explain? Where does Zope even use zlib? --Guido van Rossum (home page: http://www.python.org/~guido/)
Guido van Rossum wrote:
Without python 2.2 zope will continue to harbor remotely exploitable zlib-based memory exhaustion attacks. FWIW
Can you explain? Where does Zope even use zlib?
dtml-tree for one, more recent versions of ztutils' tree code as well although its mitigated to an extent by some hardcoded length limits; those are the only two I know of off the top of my head. rlimits will ensure the zope process doesn't hork the rest of the host, but even better is using the improved decompression objects available in python 2.2 which allow for low memory usage decompression. -- Jamie Heilman http://audible.transient.net/~jamie/ "I was in love once -- a Sinclair ZX-81. People said, "No, Holly, she's not for you." She was cheap, she was stupid and she wouldn't load -- well, not for me, anyway." -Holly
On Saturday 11 January 2003 4:06 pm, Jamie Heilman wrote:
Guido van Rossum wrote:
Without python 2.2 zope will continue to harbor remotely exploitable zlib-based memory exhaustion attacks. FWIW
There are workarounds that work in 2.1.x, and I dont think any uses in Zope are performance-critical. I will be happy to push through any patches for any other Zopes uses.
Can you explain? Where does Zope even use zlib?
dtml-tree for one,
That is the least of your worries for dtml-tree. Please try the patch at: http://www.zope.org/Members/htrd/tree.diff This has a chance for 2.6.2 if I get enough positive feedback from people who actually use dtml-tree. (and a sufficently paranoid review would be nice too.) -- Toby Dickenson http://www.geminidataloggers.com/people/tdickenson
On Saturday 11 January 2003 4:06 pm, Jamie Heilman wrote:
Guido van Rossum wrote:
Without python 2.2 zope will continue to harbor remotely exploitable zlib-based memory exhaustion attacks. FWIW
There are workarounds that work in 2.1.x, and I dont think any uses in Zope are performance-critical. I will be happy to push through any patches for any other Zopes uses.
I expect I'll be releasing Python 2.1.4 in the next month or so. Can you submit a patch and assign it to me? --Guido van Rossum (home page: http://www.python.org/~guido/)
On Sunday 12 January 2003 8:16 pm, Guido van Rossum wrote:
On Saturday 11 January 2003 4:06 pm, Jamie Heilman wrote:
Guido van Rossum wrote:
Without python 2.2 zope will continue to harbor remotely exploitable zlib-based memory exhaustion attacks. FWIW
There are workarounds that work in 2.1.x, and I dont think any uses in Zope are performance-critical. I will be happy to push through any patches for any other Zopes uses.
I expect I'll be releasing Python 2.1.4 in the next month or so. Can you submit a patch and assign it to me?
The fix in python 2.2 is in rev 2.44 of zlibmodule.c. It involves an API addition to the zlib module, which I understand is discouraged for a Python bug fix release? I think the workarounds in Zope are a better solution for Zope 2.6.x. We can gradually migrate these to the new zlib API once Zope has other dependencies on Python 2.2 -- Toby Dickenson http://www.geminidataloggers.com/people/tdickenson
participants (10)
-
Adam Manock -
Anthony Baxter -
Chris McDonough -
Clemens Robbenhaar -
Guido van Rossum -
Jamie Heilman -
Jeffrey P Shell -
Leonardo Rochael Almeida -
Tena Sakai -
Toby Dickenson