Re: Untrusted search path vulnerabilities

2010-11-18 Thread Mike Hommey
On Thu, Nov 18, 2010 at 07:04:07PM +0800, Paul Wise wrote: > > On Wed, Nov 17, 2010 at 22:58, Jakub Wilk wrote: > >> A number of packages in the archive sets the PYTHONPATH environment > >> variable > >> in an insecure way. They do something like: > >> > >>      PYTHONPATH=/spam/eggs:$PYTHONPATH

Re: Check license and copyright of files in entire tree (was: Proposed new package, bugs-everywhere_0.0.193-1.1)

2008-04-21 Thread Mike Hommey
On Mon, Apr 21, 2008 at 11:27:18PM +1000, Ben Finney wrote: > Emilio, and everyone: a reminder to please continue following > http://www.debian.org/MailingLists#codeofconduct>. In particular, > please don't send individual copies of messages also sent to the list, > since I haven't asked for that.

Re: Report on the situation of python2.5 in Debian

2007-10-05 Thread Mike Hommey
On Fri, Oct 05, 2007 at 08:04:27PM +0200, Josselin Mouette wrote: > Please note that they can all be binNMUed after python2.5 has become the > default, but all of them will have to migrate to testing at once. We > must make this list shorter unless we want this transition to recall bad > memories t

current python-only packages and new policy

2006-07-06 Thread Mike Hommey
Hi, I'm writing because the New Policy is not very verbose on building a package for only the current version of python. First, why would i need to build-dep on python-all-dev when python-dev is enough ? Second, why would i need to use python-central or python-support when there's only one suppo

Re: Python independant binary extensions

2006-07-02 Thread Mike Hommey
On Sun, Jul 02, 2006 at 12:55:27PM +0200, Mike Hommey <[EMAIL PROTECTED]> wrote: > FWIW, here is what i got for python-libxslt1: the files are the same size, > but are different. I was wondering how different they could be and it's > quite stunning, actually: > [EMAIL PRO

Re: Python independant binary extensions

2006-07-02 Thread Mike Hommey
FWIW, here is what i got for python-libxslt1: the files are the same size, but are different. I was wondering how different they could be and it's quite stunning, actually: [EMAIL PROTECTED]:/usr/lib/python-support/python-libxslt1$ hexdump -C python2.3/libxsltmod.so > /tmp/2.3 [EMAIL PROTECTED]:/u

Re: Python independant binary extensions

2006-06-30 Thread Mike Hommey
On Fri, Jun 30, 2006 at 06:43:22PM +0200, Josselin Mouette <[EMAIL PROTECTED]> wrote: > Le vendredi 30 juin 2006 à 17:38 +0200, Mike Hommey a écrit : > > On Fri, Jun 30, 2006 at 04:16:40PM +0200, Josselin Mouette <[EMAIL > > PROTECTED]> wrote: > > > Python-s

Re: Python independant binary extensions

2006-06-30 Thread Mike Hommey
On Fri, Jun 30, 2006 at 04:16:40PM +0200, Josselin Mouette <[EMAIL PROTECTED]> wrote: > Python-support already checks the md5sums of the files to install, but > it excludes the .so because files are moved to /usr/share and it would > violate the FHS. I also thought this would never happen. > > I

Re: Python independant binary extensions

2006-06-29 Thread Mike Hommey
On Thu, Jun 29, 2006 at 10:09:20PM +0200, Mike Hommey <[EMAIL PROTECTED]> wrote: > Hi all, > > I'm currently working on getting libxml2 (and later libxslt) to the new > policy, and actually noticed something interesting: > -rw-r--r-- root/root273888 2006-06-29

Python independant binary extensions

2006-06-29 Thread Mike Hommey
Hi all, I'm currently working on getting libxml2 (and later libxslt) to the new policy, and actually noticed something interesting: -rw-r--r-- root/root273888 2006-06-29 22:02 ./usr/lib/python-support/python-libxml2/python2.3/libxml2mod.so -rw-r--r-- root/root273888 2006-06-29 22:02 ./us

Re: Coordinated effort to update python packages

2006-06-14 Thread Mike Hommey
On Tue, 13 Jun 2006 at 16:10:48 -0500, Joe Wreschnig wrote: > On Tue, 2006-06-13 at 22:05 +0200, Mike Hommey wrote: > > What about people who want to use pyxpcom with modules that aren't > > available with the current python ? > > But a user couldn't install more

Re: Coordinated effort to update python packages

2006-06-13 Thread Mike Hommey
On Tue, Jun 13, 2006 at 09:55:08PM +0200, Raphael Hertzog <[EMAIL PROTECTED]> wrote: > When you install some python extensions (.so), it is common that they come > with > associated .py files (modules). Those .py files usually are the same in > /usr/lib/python2.3 and /usr/lib/python2.4, that's w

Re: Coordinated effort to update python packages

2006-06-13 Thread Mike Hommey
On Tue, Jun 13, 2006 at 08:38:57PM +0200, Raphael Hertzog <[EMAIL PROTECTED]> wrote: > Hello, > > the Python team has agreed on a new policy [1]. As we want to do the > python 2.4 transition now, we need to make sure the packages match the > policy. This will limit the amount of broken packages w

Re: when and why did python(-minimal) become essential?

2006-01-26 Thread Mike Hommey
On Thu, Jan 26, 2006 at 04:12:35PM +0100, Josselin Mouette <[EMAIL PROTECTED]> wrote: > Le samedi 21 janvier 2006 à 21:52 +0100, Mike Hommey a écrit : > > On Sat, Jan 21, 2006 at 02:21:34PM -0600, Joe Wreschnig <[EMAIL PROTECTED]> > > wrote: > > > Python is t

Re: when and why did python(-minimal) become essential?

2006-01-21 Thread Mike Hommey
On Sat, Jan 21, 2006 at 02:21:34PM -0600, Joe Wreschnig <[EMAIL PROTECTED]> wrote: > Python is the "official" language of Ubuntu. If we want to merge work > they're doing (Anthony Towns mentioned their work on boot speed, for > example) it's a good idea to structure our Python like theirs is. This