Personal tools
Skip to content. | Skip to navigation
This package provides Python modules that abstract many formats of Debian related files. Currently handled are: * Debtags information (debian.debtags module) * debian/changelog (debian.changelog module) * Packages files, pdiffs (debian.debian_support module) * Control files of single or multiple RFC822-style paragraphs, e.g. debian/control, .changes, .dsc, Packages, Sources, Release, etc. (debian.deb822 module) * Raw .deb and .ar files, with (read-only) access to contained files and meta-information
It is a collection of functions/decorators which is used to signal a user when * a method (static method, class method, or regular instance method) or a class or function is going to be removed at some point in the future. * to move a instance method/property/class from an existing one to a new one * a keyword is renamed * further customizing the emitted messages
The aim of the decorator module is to simplify the usage of decorators for the average programmer, and to popularize decorators usage giving examples of useful decorators, such as memoize, tracing, redirecting_stdout, locked, etc. The core of this module is a decorator factory called decorator.
Want to use decorators, but still need to support Python 2.3? Wish you could have class decorators, decorate arbitrary assignments, or match decorated function signatures to their original functions? Then you need "DecoratorTools"
The results of an attack on a vulnerable XML library can be fairly dramatic. With just a few hundred Bytes of XML data an attacker can occupy several Gigabytes of memory within seconds. An attacker can also keep CPUs busy for a long time with a small to medium size request. Under some circumstances it is even possible to access local files on your server, to circumvent a firewall, or to abuse services to rebound attacks to third parties. The attacks use and abuse less common features of XML and its parsers. The majority of developers are unacquainted with features such as processing instructions and entity expansions that XML inherited from SGML. At best they know about <!DOCTYPE> from experience with HTML but they are not aware that a document type definition (DTD) can generate an HTTP request or load a file from the file system. None of the issues is new. They have been known for a long time. Billion laughs was first reported in 2003. Nevertheless some XML libraries and applications are still vulnerable and even heavy users of XML are surprised by these features. It’s hard to say whom to blame for the situation. It’s too short sighted to shift all blame on XML parsers and XML libraries for using insecure default settings. After all they properly implement XML specifications. Application developers must not rely that a library is always configured for security and potential harmful data by default.
This package contains python bindings for deltarpm.