Pyowa Meeting Tomorrow (8/6)

2009-08-06 Thread Mike Driscoll
Pyowa Meeting - Thursday, Aug. 8th, 2009

Time: 6:30 - 8:45 p.m.
Location: Ames Public Library, Founders Suite, Ames, IA

Itinerary:

- Presentation on Building Executables and Installers with GUI2Exe and Inno
Setup
- Possible group programming exercise
- Social Time

We hope to see you there!


Mike Driscoll

www.pyowa.org
-- 
http://mail.python.org/mailman/listinfo/python-announce-list

Support the Python Software Foundation:
http://www.python.org/psf/donations/


Moovida Media Center 1.0.6 Release

2009-08-06 Thread Olivier Tilloy
Dear Python users,

The Moovida team is happy to announce the release of Moovida Media
Center 1.0.6, code-named "Jana".

Moovida, formerly known as Elisa, is a cross-platform and open-source
Media Center written in Python.
It uses GStreamer [1] for media playback and pigment [2] to create an
appealing and intuitive user interface.

This new version fixes many important bugs (see attached release notes)
among which crashes on windows (reduced by 35%) and improves the overall
performance (the UI is twice as fluid and Moovida uses 10MB less memory).

Thanks to contributions from the community, Moovida now ships with
complete translations for Spanish, French, Italian, Polish and Brazilian
Portuguese. Everyone is welcome to contribute to translate Moovida in
their mother tongue: see http://translations.launchpad.net/elisa.

This release is a lightweight release, meaning it is pushed through our
automatic plugin update system. Additionally a windows installer is
available for download on our website.
As usual, for users already running Moovida, the upgrade to 1.0.6 should
be done automatically via the plugin repository.

A complete list of the issues fixed can be found at:
http://launchpad.net/elisa/+milestone/1.0.6

This is also summarised in the (attached) release notes.

Installers and sources can be downloaded from
http://www.moovida.com/download/

Bug reports and feature requests are welcome at
http://bugs.launchpad.net/elisa/+filebug

Have a media-centered week,

Olivier, for the Moovida team


[1] http://www.gstreamer.net/
[2] https://code.fluendo.com/pigment/trac
Moovida 1.0.6 "Jana"


This is Moovida 1.0.6, sixth release of the 1.0 branch.

New features since 1.0.5:

- A common caching module in the core

Bugs fixed since 1.0.5:

- 380974: Widget styles updated too often
- 392082: [win:crash] Startup crash when calling __GetProcFromComCtl32 on Acer 
machines
- 401839: [win32] Moovida doesn't start for usernames containing an apostrophe
- 259135: [linux] Unable to display pictures served by Coherence over UPnP
- 268220: 'Setup LIRC' script crashes after setting up all keys
- 293805: [solaris] Moovida doesn't install desktop file
- 388910: Picture library is not opening
- 396501: Multiple simultaneous loading of the same section 
- 396510: Unable to login into flickr account
- 398541: [win32] FLAC files not recognized
- 399384: Tracebacks when entering/scrolling a list controller
- 403058: Texts cuts if Liberation font used by Moovida
- 408707: Description of track/song going beyond the length of 'textbox'
- 254951: The discogs resource provider modifies requests
- 274324: Hide passwords in the text entry of the on-screen-keyboard
- 296523: Generic "favorites" plugin depends on the "shoutcast" plugin
- 303307: Invalid frob error from the flickr plugin
- 319517: Flickr account cannot be accessed again if once logged out
- 390625: Text gets regenerated for widgets not seen on screen
- 396948: List widgets don't properly update when deleting or changing items
- 400137: moovida 1.0.5. crashes in i18n when no locale is set
- 403966: [win32] Removed media sources re-appear
- 329849: The man-page is outdated
- 399977: HAL plugin should work on Solaris


Download

You can find source releases of Moovida on the download page:
http://www.moovida.com/download


Moovida Homepage

More details can be found on the project's website: http://www.moovida.com


Support and Bugs

We use Launchpad for bug reports and feature requests:
https://bugs.launchpad.net/elisa/+filebug


Developers

All code is in a Bazaar branch and can be checked out from there.
It is hosted on Launchpad: https://code.launchpad.net/elisa


Contributors to this release:

- Anna Wojdel
- David McLeod
- Fernando Casanova Coch
- Florian Boucault
- Guillaume Emont
- Jutta Mailander
- Lionel Martin
- Loïc Molinari
- Maxwell Young
- Michał Sawicz
- Olivier Tilloy
- Philippe Normand
- Rafał Zawadzki
- Ugo Riboni
- Xose Pérez
-- 
http://mail.python.org/mailman/listinfo/python-announce-list

Support the Python Software Foundation:
http://www.python.org/psf/donations/


CVE-2009-0668 and CVE-2009-0669: Releases to fix ZODB ZEO server vulnerabilities

2009-08-06 Thread Jim Fulton
Vulnerabilities have been found in the Zope Object Database (ZODB)
Zope Enterprise Objects (ZEO) network protocol that allow:

  CVE-2009-0668 Arbitrary Python code execution in ZODB ZEO storage servers
  CVE-2009-0669 Authentication bypass in ZODB ZEO storage servers

The vulnerabilities only apply if you are using ZEO to share a
database among multiple applications or application instances and if
untrusted clients are able to connect to your ZEO servers.

The first vulnerability (CVE-2009-0668) was introduced in ZODB 3.3
(Zope 2.8).  The second vulnerability (CVE-2009-0669) was introduced
in ZODB 3.2 (Zope 2.7).

Overview

These vulnerabilities are addressed by updates to ZODB.  Newer
releases of Zope are also being provided for people who get ZODB with Zope
releases.

A new release of ZODB is available here:

  http://pypi.python.org/pypi/ZODB3/3.8.2

  (There is also a new development release at
   http://pypi.python.org/pypi/ZODB3/3.9.0b5.)

New Zope releases that include the fixes can be found here:

  http://www.zope.org/Products/Zope/2.10.9
  http://www.zope.org/Products/Zope/2.11.4
  http://www.zope.org/Products/Zope/2.8.11
  http://www.zope.org/Products/Zope/2.9.11
  http://www.zope.org/Products/Zope3/3.1.1
  http://www.zope.org/Products/Zope3/3.2.4
  http://www.zope.org/Products/Zope3/3.3.3
  http://www.zope.org/Products/Zope3/3.4.1

We recommend updating any ZEO storoage servers you're running to ZODB
3.8.2 (or ZODB 3.9.0b5) or to ZODB software provided with the Zope
releases listed above.  These versions support ZEO clients as old as
ZODB 3.2. It isn't necessary to update client software (such as Zope
application servers).

Restricting access to ZEO storage servers

It is very important to restrict write access to ZODB databases.  These
releases only protect against vulnerabilities in the ZEO network
protocol. ZODB uses Python pickles to store data. Loading data from
the database can cause arbitrary code to be executed as part of object
deserialization.  Clients have full access to manipulate database
data.  For this reason, it is very important that only trusted clients
be allowed to write to ZODB databases.

Jim

-- 
Jim Fulton
-- 
http://mail.python.org/mailman/listinfo/python-announce-list

Support the Python Software Foundation:
http://www.python.org/psf/donations/