Sebastian Pipping

icon indicating a website link https://blog.hartwork.org/ icon indicating an email [email protected]

icon location Berlin, Europe icon location If you enjoy my Open Source work, please consider donating to the Free Software Foundation Europe (FSFE).

Results 927 comments of Sebastian Pipping

[security] `Bio.Entrez.DataHandler`, `Bio.Entrez.read`, `Bio.Entrez.parse` are vulnerable to XXE and SSRF

Update: Mitre has assigned CVE-2025-68463 to this issue.

Is offlineimap3 maintained? Will it be?

@thekix thanks for the release! I don't see it on PyPI yet — could you publish it to PyPI as well please? (Issue #219 is related.)

Resolve direct and indirect parser recursion (fixes #282)

> I've now looked at all commits, except the ones for indirection recursion. @TimWolla thank you, very kind! :pray: > > With regard to the commits reviewed so far, I...

Resolve direct and indirect parser recursion (fixes #282)

> The two fixes to indirect recursion are untouched, but I will look at these two more, next. @TimWolla the PR is in a shape now where I feel confident...

Resolve direct and indirect parser recursion (fixes #282)

> I have now looked at all the commits. The two indirect ones look good to me from a correctness perspective. The direct one has the one mistake I pointed...

[Git `main`] `-Dprotobuf_BUILD_LIBUPB:BOOL=OFF` is broken (and not covered by CI?)

@protocolbuffers any thoughts?

[Git `main`] `-Dprotobuf_BUILD_LIBUPB:BOOL=OFF` is broken (and not covered by CI?)

This issue is about an actual bug in the build system and has three upvotes. Closing actual bugs as inactive and not replying to them at all for 7 months...

[Git `main`] `-Dprotobuf_BUILD_LIBUPB:BOOL=OFF` is broken (and not covered by CI?)

Hello @esrauchg, I appreciate your reply! Let me reply to the concrete part first, and then segway into the maintenance topic: > About the specific issue: the root cause of...

[Git `main`] `-Dprotobuf_BUILD_LIBUPB:BOOL=OFF` is broken (and not covered by CI?)

> A number of topics, happy to discuss them. > > The specific status quo of the code is that protoc bin observable behavior truly does need the libupb. Its...

[Git `main`] `-Dprotobuf_BUILD_LIBUPB:BOOL=OFF` is broken (and not covered by CI?)

> I don't believe that trying to trim libupb should really make any meaningful dent in your compile time. @esrauchg I see what you mean. It was just one of...