Message 288209 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	vstinner
Recipients	alex, barry, vila, vstinner
Date	2017-02-20.14:21:00
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<[email protected]>
In-reply-to

Content
I don't understand well this change. What am I supposed to do with an UUID with safe=False? Should I loop on the function until I get safe==True? "safe for multiprocessing applications" Does it mean unique on the whole system? I looked at uuid_generate_time_safe(3) manual page which mention "synchronization mechanisms (see above)" but they are not documented. http://manpages.ubuntu.com/manpages/zesty/en/man3/uuid_generate.3.html > I'm classifying this as a security issue, (...) This issue was only fixed in Python 3.7. Does it mean that it's no more considered as as security vulnerability?

I don't understand well this change.

What am I supposed to do with an UUID with safe=False? Should I loop on the function until I get safe==True?


"safe for multiprocessing applications"

Does it mean unique on the whole system?

I looked at uuid_generate_time_safe(3) manual page which mention "synchronization mechanisms (see above)" but they are not documented.
http://manpages.ubuntu.com/manpages/zesty/en/man3/uuid_generate.3.html


> I'm classifying this as a security issue, (...)

This issue was only fixed in Python 3.7. Does it mean that it's no more considered as as security vulnerability?

History
Date	User	Action	Args
2017-02-20 14:21:01	vstinner	set	recipients: + vstinner, barry, vila, alex
2017-02-20 14:21:01	vstinner	set	messageid: <[email protected]>
2017-02-20 14:21:01	vstinner	link	issue22807 messages
2017-02-20 14:21:00	vstinner	create