From owner-freebsd-python@freebsd.org Thu Aug 20 18:10:50 2015 Return-Path: Delivered-To: freebsd-python@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D43B9BFB45 for ; Thu, 20 Aug 2015 18:10:50 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id E08D9177B for ; Thu, 20 Aug 2015 18:10:49 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: by mailman.ysv.freebsd.org (Postfix) id DDB559BFB43; Thu, 20 Aug 2015 18:10:49 +0000 (UTC) Delivered-To: python@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DD4A39BFB42 for ; Thu, 20 Aug 2015 18:10:49 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id AFA921779 for ; Thu, 20 Aug 2015 18:10:49 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 3636020981 for ; Thu, 20 Aug 2015 14:10:42 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute5.internal (MEProxy); Thu, 20 Aug 2015 14:10:42 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=g5gE8ckDKphd/Dt xa5zuirqJEX4=; b=Pw1xe+Ew0dzcPvXHt5cK51z4E5BEZYbQPPhugq5oVOnbMqI IpcJL+3JmkZp8ifkIjCMWaLSf2fdbNL2avK+9rB1Pj7u71NVBxMvZIk52t+MHjrj NPr/rxh+uh3edqtRsuMKP0dRlsm2euFt0GHtgoNHjwYX6SUbiVg8bzb7pl3E= Received: by web3.nyi.internal (Postfix, from userid 99) id 0AB4F101B4E; Thu, 20 Aug 2015 14:10:42 -0400 (EDT) Message-Id: <1440094241.908772.361540473.611AC2DA@webmail.messagingengine.com> X-Sasl-Enc: 49YEiulvZmzQCusSbhc+lTYiFIBtwEvmzS9NgRQVfeJa 1440094241 From: Mark Felder To: "Li-Wen Hsu" Cc: python MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-4fee8ba5 In-Reply-To: <20150820121552.GA10322@FreeBSD.cs.nctu.edu.tw> References: <1439923130.1067596.359551361.446BF03F@webmail.messagingengine.com> <1439997826.2721336.360395769.5671C796@webmail.messagingengine.com> <1439998219.2722781.360401857.46FCCBD9@webmail.messagingengine.com> <1439998614.2724165.360407393.5F130D70@webmail.messagingengine.com> <20150820121552.GA10322@FreeBSD.cs.nctu.edu.tw> Subject: Re: py-django vulnerabilities Date: Thu, 20 Aug 2015 13:10:41 -0500 X-BeenThere: freebsd-python@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: FreeBSD-specific Python issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Aug 2015 18:10:50 -0000 On Thu, Aug 20, 2015, at 07:15, Li-Wen Hsu wrote: > On Wed, Aug 19, 2015 at 10:36:54 -0500, Mark Felder wrote: > > On Wed, Aug 19, 2015, at 10:30, Mark Felder wrote: > > > On Wed, Aug 19, 2015, at 10:27, Li-Wen Hsu wrote: > > > > Thanks for the update. I have the same patch with you. But I haven't > > > > had www/py-django-devel pass the poudriere test. Are you working on > > > > that too? > > > > > > I have not yet touched www/py-django-devel. I figure fewer users are > > > affected by it, so I wanted to get the stable releases pushed out first. > > > > Setting the snapshot date to 20150819 seems to fetch and build fine. Is > > that OK? Do you follow django development and prefer to carefully choose > > a different snapshot date to avoid any recent bugs/issues that could > > affect users? > > GH_TAGNAME should also be updated, or you will get the old code. > > I got following error from poudriere. > > https://gist.github.com/anonymous/7fdf1a8d9645ef324e82 > > I am a bit not sure if this is due to our python port infrastructure or > django itself. Haven't looked into it, but `python setup.py install` on > Mac also failed. > I just had a chat with a django developer and he told me those things are not supposed to be byte-compiled https://github.com/django/django/blob/master/setup.py#L26-L28 They're listed right there in the setup.py So the question is: is this a bug on their side if you also saw it on OSX?