Beaker

Latest version: v1.13.0

Safety actively analyzes 626436 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 9

1.6.4

Not secure
=========================

.. warning::

Session hashing for encrypted sessions using PyCrypto has changed. This
will result in sessions being invalidated upon upgrading if PyCrypto is
used.

* Fix bug with key_length not being coerced to a int for comparison. Patch by
Greg Lavallee.
* Fix bug with cookie invalidation not clearing the cookie data. Patch by
Vasiliy Lozovoy.
* Added ability to pass in cookie_path for the Session. Patch by Marcin
Kuzminski.
* Add NSS crypto support to Beaker. Patch by Miloslav Trmac of Redhat.
* Fix security bug with pycrypto not securing data such that an attacker could
possibly determine parts of the encrypted payload. Patch by Miloslav Trmac of
Redhat. See `CVE-2012-3458 <http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-3458>`_.
* Add ability to specify schema for database-backed sessions. Patch by Vladimir
Tananko.
* Fix issue with long key names in memcached backend. Patch by Guillaume
Taglang.

1.6.3

Not secure
=========================

* Fix bug with cookie deletion on leap years. Patch contributed by Greg
Nelson and Michael Wirth.
* Fix issue with referencing same module via different import paths. Patch
contributed by brianfrantz.
* Fix cookie expiration check. Patch contributed by Mike Dirolf.

1.6.2

Not secure
==========================

* Updated dogpile lock so that it locks per namespace+key rather than on the
entire namespace. (101)
* Added encryption option for any backend. Patch contributed by Toby Elliot.

1.6.1

Not secure
==========================

* Remove stray print statement.
* Include .app for consistency instead of requiring wrap_app.

1.6

Not secure
========================

* Fix bug with cache_key length calculation.
* Fix bug with how path was set so that its restored properly and propagated.
* Fix bug with CacheMiddleware clobbering enabled setting.
* Update option for ``cookie_expires`` so that it can now handle an integer
which will be used as the seconds till the cookie expires.
* Merge fix for Issue 31, can now handle unicode cache keys.
* Add ``key_length`` option for cache regions, and for keyword args passed
into the cache system. Cache keys longer than this will be SHA'd.
* added runtime beaker.__version__
* Add ``webtest_varname`` option to configuration to optionally include
the session value in the environ vars when using Beaker with WebTest.
* Defer running of pkg_resources to look for external cache modules
until requested. 66
* memcached backend uses pylibmc.ThreadMappedPool to ensure thread-local
usage of pylibmc when that library is in use. (60)
* memcached backend also has ``memcache_module`` string argument, allows
direct specification of the name of which memcache backend to use.
* Basic container/file-based Session support working in Py3K. (72)
* Further Python 3 fixes
* Added an optimization to the FileNamespaceContainer when used with
Session, such that the pickled contents of the file are not
read a second time when session.save() is called. (64)
* Fixed bug whereby CacheManager.invalidate wouldn't work for a function
decorated by cache.cache(). (61)
* cache decorators cache.cache(), cache_region() won't include first
argument named 'self' or 'cls' as part of the cache key. This allows
reasonably safe usage for methods as well as functions. (55)
* file backend no longer squashes unpickling errors. This was inconsistent
behavior versus all the other backends.
* invalidate_corrupt flag on Session now emits a warning. (52)
* cache.remove_value() removes the value even if it's already marked
'expired' (42)

1.5.4

Not secure
=========================

* Fix import error with InvalidCryptoBackendError.
* Fix for domain querying on property.
* Test cleanups
* Fix bug with warnings preventing proper running under Jython.

Page 3 of 9

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.