Package: python-moinmoin
Version: 1.9.4-8+deb7u1~bpo60+1
Severity: normal
On my Debian server, which runs squeeze plus squeeze backports, I was
running python-moinmoin 1.9.4-8+deb7u1~bpo60+1 from squeeze backports.
After the recent security upgrade, moinmoin stopped working. The
webserver (cherokee) log files had this error:
2013-01-07 20:48:32,231 WARNING MoinMoin.log:139 using logging configuration
read from built-in fallback in MoinMoin.log module!
Traceback (most recent call last):
File "/usr/share/moin/server/moin.fcgi", line 44, in <module>
app = make_application(shared=True) # <-- adapt here as needed
File "/usr/lib/pymodules/python2.6/MoinMoin/web/serving.py", line 82, in
make_application
from MoinMoin.wsgiapp import application
File "/usr/lib/pymodules/python2.6/MoinMoin/wsgiapp.py", line 14, in
<module>
from MoinMoin.web.contexts import AllContext, Context, XMLRPCContext
File "/usr/lib/pymodules/python2.6/MoinMoin/web/contexts.py", line 16, in
<module>
from MoinMoin import i18n, error, user, config, wikiutil
File "/usr/lib/pymodules/python2.6/MoinMoin/user.py", line 32, in <module>
from werkzeug.security import safe_str_cmp as safe_str_equal
ImportError: cannot import name safe_str_cmp
It seems that werkzeug.security contains safe_str_cmp only from version
0.7. See the documentation of werkzeug.security.safe_str_cmp in
<http://werkzeug.pocoo.org/docs/utils/>. However, in squeeze,
python-werkzeug is only at version 0.6.2-1 (and the wheezy version of
python-werkzeug, namely 0.8.3, isn't in backports).
I worked around the problem by downgrading to the python-moinmoin in
squeeze (1.9.3-1+squeeze4) and changing /moin_static194/ to
/moin_static193/ in cherokee's config file.
Is a better solution to backport python-werkzeug? I tried recompiling
it from the source package, but it required upgrading many other
packages so I just took the shortcut above.
-Sanjoy
-- System Information:
Debian Release: 6.0.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 3.5.2-linode45 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages python-moinmoin depends on:
ii python 2.6.6-3+squeeze7 interactive high-level object-orie
ii python-parsedatetime 0.8.7-2 Python module to parse human-reada
ii python-pygments 1.3.1+dfsg-1 syntax highlighting package writte
ii python-support 1.0.10 automated rebuilding support for P
ii python-werkzeug 0.6.2-1 collection of utilities for WSGI a
Versions of packages python-moinmoin recommends:
ii cherokee [httpd-cgi] 1.0.8-5+squeeze1 Very fast, flexible and easy to co
ii fckeditor 1:2.6.6-1squeeze1 rich text format javascript web ed
ii postfix [mail-transpor 2.7.1-1+squeeze1 High-performance mail transport ag
ii python-xapian 1.2.7-1~bpo60+1 Xapian search engine interface for
ii python-xappy 0.5-4 easy-to-use interface to the Xapia
Versions of packages python-moinmoin suggests:
pn antiword <none> (no description available)
pn catdoc <none> (no description available)
pn docbook-dsssl <none> (no description available)
pn poppler-utils | xpdf-utils <none> (no description available)
pn python-4suite-xml <none> (no description available)
ii python-docutils 0.7-2 utilities for the documentation of
pn python-flup <none> (no description available)
pn python-gdchart <none> (no description available)
pn python-ldap <none> (no description available)
pn python-mysqldb <none> (no description available)
pn python-openid <none> (no description available)
pn python-pyxmpp <none> (no description available)
pn python-tz <none> (no description available)
pn python-xml <none> (no description available)
pn smbfs <none> (no description available)
ii wamerican [wordlist] 6-3 American English dictionary words
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
