[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Jason R. Coombs added the comment: For posterity, here's the release notes that we had drafted on the pirate pad: Note: This patch release of Python may have compatibility implications for environments utilizing the third-party virtualenv. For more detail see XXX. [the note above is intended t

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Benjamin Peterson added the comment: Closing, now that we've released finals. -- resolution: -> invalid status: open -> closed ___ Python tracker ___ __

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Changes by Éric Araujo : -- nosy: +eric.araujo ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Changes by R. David Murray : -- nosy: +r.david.murray ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://ma

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Carl Meyer added the comment: I'd been thinking the "escape the security fix" argument didn't apply, because the security fix requires opt-in anyway and the -R flag would fail immediately on a non-updated virtualenv. But there is also the environment variable. It is quite possible that someon

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Barry A. Warsaw added the comment: On Mar 29, 2012, at 09:24 PM, Jason R. Coombs wrote: >My mistake - Georg has not yet weighed in. Perhaps it's best to wait for his >opinion. I'm happy to go along with RM consensus. It should work the same in all stable releases. -- ___

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Georg Brandl added the comment: I am with Benjamin. First we put a lot of effort into fixing this issue, and then we're letting quite a lot of deployments (and I assume that quite a lot of deployments *are* in virtualenvs) "escape" the fix? That doesn't sound right. --

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Jason R. Coombs added the comment: My mistake - Georg has not yet weighed in. Perhaps it's best to wait for his opinion. -- ___ Python tracker ___ _

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Changes by Eric Snow : -- nosy: +eric.snow ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.o

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Jason R. Coombs added the comment: The consensus from the release managers seems to be "don't patch", so I propose we move forward with including the release notes as drafted. -- ___ Python tracker __

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Benjamin Peterson added the comment: This "bug" will only happen in virtualenvs, though, so I expect virtualenv will be blamed. -- ___ Python tracker ___ __

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Changes by Dave Malcolm : -- nosy: +dmalcolm ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Carl Meyer added the comment: There's no question that this is a case of virtualenv allowing users to do something that's not supported. Nonetheless, virtualenv is very widely used, and in practice it does not break "more often". This, however, will break for lots of users, and those users wi

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Benjamin Peterson added the comment: Running the python interpreter against a different version of the stdlib is completely unsupported, and I'm surprised it hasn't broken more. I'm rejecting any shims for it for 2.7 and 3.1. -- ___ Python tracker

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Jason R. Coombs added the comment: Martin makes a good point, but I see it somewhat differently. virtualenv and its users have always accepted the risk of running an old interpreter against a different standard library (of the same minor version). So the risk of not receiving the security pat

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Martin v. Löwis added the comment: I'm not so sure that it is desirable to make it compatible. It is ultimately virtualenv's "fault" to use the 2.7.3 library with a 2.7.2 binary. If we get this to "work", people will still not gain the hash randomization. IOW, they get the library update, but

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Barry A. Warsaw added the comment: On Mar 29, 2012, at 06:25 PM, Carl Meyer wrote: > >Carl Meyer added the comment: > >Alternatively, the conditional definition of urandom in os.py (removed in >http://hg.python.org/cpython/rev/a0f43f4481e0#l7.1) could be reintroduced, >allowing the new stdlib

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Carl Meyer added the comment: Alternatively, the conditional definition of urandom in os.py (removed in http://hg.python.org/cpython/rev/a0f43f4481e0#l7.1) could be reintroduced, allowing the new stdlib to be used with older interpreters. (Thanks to Dave Malcolm for pointing this out.) This s

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Jason R. Coombs added the comment: 3.1 and 3.2 are affected as well. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsu

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

Changes by Jason R. Coombs : -- versions: +Python 3.1 -Python 3.3 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe

[issue14444] Virtualenv not portable from Python 2.7.2 to 2.7.3 (os.urandom missing)

New submission from Jason R. Coombs : Summary of this thread: http://mail.python.org/pipermail/python-dev/2012-March/118233.html When upgrading a host from Python 2.6.7 to 2.6.8 or from 2.7.2 to 2.7.3, virtualenvs will no longer work if they attempt to use os.urandom. I have not yet investiga