Package: libapache2-mod-python
Version: 3.5.0-1+b1
Severity: important
Tags: patch
X-Debbugs-Cc: witsc...@gmail.com

Dear Maintainer,

There is a bug outstanding in the mod-python Cookie.py module that has had 
patches
upstream for some time. It affects the functionality of the Cookie.py module as 
it
applies to setting the cookie expires value. I encountered this bug when 
converting
web apps from python2 to python3. They affect the python3 version of mod-python,
which will be the default python version with the release of debian bullseye.

For brevity's sake I will provide the git address to these patches.

patch #1
https://github.com/grisha/mod_python/commit/06f994ad439aacdf79ec52d3e997038dfad8aeac

patch #2
https://github.com/grisha/mod_python/commit/902bb8700e2c45ffd96b78e2f1146a3c101be7f5


If either of these patches have not been applied the mod-python Cookie.py 
module will
not be able to set an cookie expires value in a modern browser. This results in 
a
loss of core functionality regarding the cookie.py module.

Mod-python provides a valuable set of tools for web development and the 
Cookie.py
module is an essential part of that tool set. It would benefit debian users to 
have
this bug fixed for the bullseye release.


-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-security
  APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-5-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libapache2-mod-python depends on:
ii  apache2-bin [apache2-api-20120211]  2.4.46-4
ii  libc6                               2.31-11
ii  libpython3.9                        3.9.2-1
ii  python3                             3.9.2-2

libapache2-mod-python recommends no packages.

Versions of packages libapache2-mod-python suggests:
pn  libapache2-mod-python-doc  <none>

-- no debconf information

Reply via email to