python-fdb in debian

2014-06-22 Thread Philippe Makowski
Hi, a long time ago I said that I was looking for a sponsor for python-fdb in Debian. Last Friday, (thanks), Russell Stuart (ras at debian dot org), contacted me saying : > I went looking for python-fdb in Debian. I see you were looking for > a sponsor at one stage. > > Still looking? so it see

Re: Python 3.4 and ensurepip (rehashed, long)

2014-03-20 Thread Philippe Makowski
Le 20/03/14 09:53, Bohuslav Kabrda a écrit : I'll be glad to discuss this/answer all questions that might arise about our approach. I'd really love to see it as a general cross-distro approach. Thanks for your post As Mageia packager, I'm interested to join this kind of discussion. I didn't h

Re: about python-oauth2: CVE-2013-4347

2013-10-19 Thread Philippe Makowski
Philippe Makowski [2013-10-18 22:02] : > but it let the other CVE-2013-4346 about _check_signature() ignoring the > nonce value when validating signed urls > > any idea ? maybe something like that :https://github.com/pmakowski/python-oauth2/commit/7002422bb39bc137713933bc2e5525185383

Re: about python-oauth2: CVE-2013-4347

2013-10-18 Thread Philippe Makowski
Jakub Wilk [2013-10-09 08:40] : > Yeah, the oss-sec mail is about using a RNG that is not suitable for > cryptographic purposes. This can be easily fixed by using > "random.SystemRandom" (which uses /dev/urandom) instead of the "random" > module directly (which has a Mersenne Twister under the hoo

Re: about python-oauth2: CVE-2013-4347

2013-10-08 Thread Philippe Makowski
Le 9 oct. 2013 01:42, "Paul Wise" a écrit : > > On Wed, Oct 9, 2013 at 5:46 AM, Philippe Makowski wrote: > > > do you think that for fixing that, using > > > > return ''.join(random.choice('abcdefghijklmnopqrstuvwxyz123456789') for >

about python-oauth2: CVE-2013-4347

2013-10-08 Thread Philippe Makowski
Hi, do you think that for fixing that, using return ''.join(random.choice('abcdefghijklmnopqrstuvwxyz123456789') for i in xrange(length)) instead of the actual return ''.join([str(random.randint(0, 9)) for i in range(length)]) would be an acceptable fix ? -- To UNSUBSCRIBE, email to debian

RFS: python-fdb/0.9.9-2 #697123

2013-02-25 Thread Philippe Makowski
Hi all, is there someone to sponsor it ? http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697123 thanks -- To UNSUBSCRIBE, email to debian-python-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/512bbeaa.3

Re: Python fdb

2012-12-31 Thread Philippe Makowski
Jakub Wilk [2012-12-31 18:40] : > Indeed, it looks better. As promised, I added you to the team. Feel free > to inject the package to the team's repository. > done, thanks -- To UNSUBSCRIBE, email to debian-python-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listm

Re: Python fdb

2012-12-30 Thread Philippe Makowski
Hi, the new version should be better http://mentors.debian.net/debian/pool/main/p/python-fdb/python-fdb_0.9.9-2.dsc Thanks for the review -- To UNSUBSCRIBE, email to debian-python-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: h

Re: Python fdb

2012-12-28 Thread Philippe Makowski
Thanks 2012/12/28 Jakub Wilk : > ImportError: No module named setuptools seems that I forgot a build require, I have a lot to learn about various dh tools , debhelper magic and Debian various macros. > I also noticed that docs/_static/ contains some minified JavaScript files > without source. Y

Re: Python fdb

2012-12-25 Thread Philippe Makowski
Hi, and happy Christmas ! Jakub Wilk [2012-12-05 17:38] : > Sorry for the late reply. > > * Philippe Makowski , 2012-11-13, 13:36: >> since Python-kinterbasdb is orphaned since 483 days in Debian and >> that upstream KInterbasdb is deprecated and unmaintained I would like

Python fdb

2012-11-13 Thread Philippe Makowski
, I guess I can manage to maintain a simple package like this one for Debian, and it will be need for Django and SQLAlchemy I never packaged any thing for Debian yet, I have to learn everything about Debian rules and tools for packaging. -- Philippe Makowski http://www.ibphoenix.com Supporting