[MIR] mod-wsgi: libapache2-mod-wsgi

Bug #566537 reported by James Westby
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
mod-wsgi (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

python-moinmoin now recommends libapache2-mod-wsgi, and so it needs an MIR.

Availability: mod-wsgi | 2.8-2 | lucid/universe | source
Rationale: needed due to moin recommends that seems reasonable, but perhaps could be dropped to suggests
Security: No CVEs could be found. No executables, no daemons, no extra ports. **apache module**
QA: standard setup for an apache module. No debconf.

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=558608 doesn't sound too fun.

https://bugs.edge.launchpad.net/ubuntu/+source/mod-wsgi - nothing for lucid
http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=mod-wsgi
http://code.google.com/p/modwsgi/issues/list - nothing jumps out

Maintained by the debian python modules team.
No test suite.

UI standards: N/A.
Dependencies: all in main.
Standards compliance: ok. Uses some exotic cdbs features.
Maintenance: looked after in Debian.
Background information:
 The mod_wsgi adapter is an Apache module that provides a WSGI (Web Server
 Gateway Interface, a standard interface between web server software and
 web applications written in Python) compliant interface for hosting Python
 based web applications within Apache. The adapter provides significantly
 better performance than using existing WSGI adapters for mod_python or CGI.

Thanks,

James

Revision history for this message
James Westby (james-w) wrote :

Note that it is an alternative recommends with httpd-cgi, so it's already
satisfied in main.

Thanks,

James

Revision history for this message
Bernd Zeimetz (bzed) wrote :

> Standards compliance: ok. Uses some exotic cdbs features.

WTF?

bzed@think ~debian/python-modules/mod-wsgi (svn)-[trunk:12886]-% grep -r cdbs debian
1 bzed@think ~debian/python-modules/mod-wsgi (svn)-[trunk:12886]-%

Alexander Sack (asac)
Changed in mod-wsgi (Ubuntu):
assignee: nobody → Michael Terry (mterry)
Revision history for this message
Michael Terry (mterry) wrote :

Correct, it doesn't use CDBS.

Looks fine. Packaging is simple and no big bugs (the mentioned upstream crasher is worked around in current package at least) and it's well maintained. I'd like to see someone subscribed to bugs on the Ubuntu side, but approved by me.

Kees, I'd like to pass to you for a bit of a security pass? An apache module that lets you run Python apps seems like a security concern beyond my ken.

Changed in mod-wsgi (Ubuntu):
assignee: Michael Terry (mterry) → Kees Cook (kees)
Revision history for this message
Kees Cook (kees) wrote :

The segfault bugs in Debian seem rather worrisome, but it seems like it's being worked on. Beyond that, nothing immediately jumps out at me. +1

Changed in mod-wsgi (Ubuntu):
status: New → In Progress
assignee: Kees Cook (kees) → nobody
Revision history for this message
Clint Byrum (clint-fewbar) wrote :

Can we seed this into main then? moin is waiting for this to hit main before the latest version can be merged (LP: #586518) and I see this as probably the most problematic of its dependencies that we need to get into main.

@mterry I will make sure somebody subscribes ubuntu-server for bug mail.

Changed in mod-wsgi (Ubuntu):
assignee: nobody → Clint Byrum (clint-fewbar)
Revision history for this message
Michael Terry (mterry) wrote :

Clint, I believe you don't want to be assigned to this bug, because that would prevent someone from grabbing it to do the actual push. Please do have someone subscribe, but it's not a blocker for this MIR. So I'm unassigning you so that some from the archive admin team will grab this.

Kees, you put this bug as "In Progress" and then unassigned yourself. Did you mean "Fix Committed"? I'm assuming so, since both you and I approved. Setting as such.

Changed in mod-wsgi (Ubuntu):
assignee: Clint Byrum (clint-fewbar) → nobody
status: In Progress → Fix Committed
Revision history for this message
Colin Watson (cjwatson) wrote :

 o mod-wsgi: libapache2-mod-wsgi
   [Reverse-Recommends: python-moinmoin]

Promoted.

Changed in mod-wsgi (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.