Beaker

Latest version: v1.13.0

Safety actively analyzes 626474 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 9

0.9.2

Not secure
=========================

* Added option to make Beaker use a secure cookie.
* Removed CTRCipher as pycryptopp doesn't need it.
* Changed AES to use 256 bit.
* Fixed signing code to use hmac with sha for better signing security.
* Fixed memcached code to use delete_multi on clearing the keys for efficiency
and updated key retrieval to properly store and retrieve None values.
* Removing cookie.py and signed cookie middleware, as the environ_key option
for session middleware provides a close enough setting.
* Added option to use just cookie-based sessions without requiring
encryption.
* Switched encryption requirement from PyCrypto to pycryptopp which uses a
proper AES in Counter Mode.

0.9.1

Not secure
========================

* Fixed bug in middleware using module that wasn't imported.

0.9

Not secure
======================

* Fixed bug in memcached replace to actually replace spaces properly.
* Fixed md5 cookie signature to use SHA-1 when available.
* Updated cookie-based session storage to use 256-bit AES-CTR mode with a
SHA-1 HMAC signature. Now requires PyCrypto to use for AES scheme.
* WARNING: Moved session and cache middleware to middleware, as per the old
deprecation warnings had said was going to happen for 0.8.
* Added cookie-only session storage with RC4 ciphered encryption, requires
Python 2.4.
* Add the ability to specify the cookie's domain for sessions.

0.8.1

Not secure
========================

* Fixed bug in database.py not properly handling missing sqlalchemy library.

0.8

Not secure
======================

* Fixed bug in prior db update causing session to occasionally not be written
back to the db.
* Fixed memcached key error with keys containing spaces. Thanks Jim Musil.
* WARNING: Major change to ext:database to use a single row per namespace.
Additionally, there's an accessed and created column present to support
easier deletion of old cache/session data. You *will* need to drop any
existing tables being used by the ext:database backend.
* Streamline ext:database backend to avoid unnecessary database selects for
repeat data.
* Added SQLAlchemy 0.4 support to ext:database backend.

0.7.5

Not secure
========================

* Fixed data_dir parsing for session string coercions, no longer picks up None
as a data_dir.
* Fixed session.get_by_id to lookup recently saved sessions properly, also
updates session with creation/access time upon save.
* Add unit tests for get_by_id function. Updated get_by_id to not result in
additional session files.
* Added session.get_by_id function to retrieve a session of the given id.

Page 8 of 9

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.