Package: libapache2-mod-python Version: 3.5.0-1+b1 Severity: important Tags: patch X-Debbugs-Cc: witsc...@gmail.com
Dear Maintainer, There is a bug outstanding in the mod-python Cookie.py module that has had patches upstream for some time. It affects the functionality of the Cookie.py module as it applies to setting the cookie expires value. I encountered this bug when converting web apps from python2 to python3. They affect the python3 version of mod-python, which will be the default python version with the release of debian bullseye. For brevity's sake I will provide the git address to these patches. patch #1 https://github.com/grisha/mod_python/commit/06f994ad439aacdf79ec52d3e997038dfad8aeac patch #2 https://github.com/grisha/mod_python/commit/902bb8700e2c45ffd96b78e2f1146a3c101be7f5 If either of these patches have not been applied the mod-python Cookie.py module will not be able to set an cookie expires value in a modern browser. This results in a loss of core functionality regarding the cookie.py module. Mod-python provides a valuable set of tools for web development and the Cookie.py module is an essential part of that tool set. It would benefit debian users to have this bug fixed for the bullseye release. -- System Information: Debian Release: bullseye/sid APT prefers testing-security APT policy: (500, 'testing-security'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-5-amd64 (SMP w/4 CPU threads) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libapache2-mod-python depends on: ii apache2-bin [apache2-api-20120211] 2.4.46-4 ii libc6 2.31-11 ii libpython3.9 3.9.2-1 ii python3 3.9.2-2 libapache2-mod-python recommends no packages. Versions of packages libapache2-mod-python suggests: pn libapache2-mod-python-doc <none> -- no debconf information