Bug#499277: python-dns security update breaks existing applications

2008-09-17 Thread Devin Carraway
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Sep 17, 2008 at 05:28:37PM +0200, Fabio Tranchitella wrote: > > transaction ID randomization. If instead of reverted to the package that > > has > > neither, you change 'self.tid' to '0' in line 199 > > of /var/lib/python-support/python2.4/

Bug#499277: python-dns security update breaks existing applications

2008-09-17 Thread Fabio Tranchitella
Hello Scott, * 2008-09-17 17:18, Scott Kitterman wrote: > Also in Sid/Lenny. It looks like there were buffer packing implications in > the security fix that neither upstream nor myself appreciated when we wrote > it. The security fix had two parts: source port randomization and > transaction

Bug#499277: python-dns security update breaks existing applications

2008-09-17 Thread Scott Kitterman
> File "/var/lib/python-support/python2.4/DNS/Lib.py", line 133, in addname > self.buf = self.buf + buf > UnicodeDecodeError: 'ascii' codec can't decode byte 0xe9 in position 0: > ordinal not in range(128) I can confirm this with your reduced test case: python -c 'import DNS; print DNS.mxlo

Bug#499277: python-dns security update breaks existing applications

2008-09-17 Thread Fabio Tranchitella
Package: python-dns Version: 2.3.0-5.2+etch1 Severity: grave Justification: breaks existing applications Hello, after upgrading our production servers running Zope 3, we started hitting the following exception: 2008-09-17T06:06:57 ERROR SiteError http://www.loveismatch.com/signup.html Traceback