Comment 13 for bug 1644003

On Sun, Nov 27, 2016 at 12:42:14PM -0000, Russel Winder wrote:
> Sid is my primary platform so that is great, thanks.
Sid upload just happened, barring any archive errors it should appear
in a couple of hours.

> Bizarrely everything is still apparently working fine on Rawhide. Python
> 2.7.12 and Bazaar 2.7.0-14. I see though that the Bazaar package is the
> Fedora 25 one, it has not been rebuilt for Fedora 26 as yet.
It's not 2.7.12 specifically that is problematic, but a patch that
was added in Debian revision 7. This is the relevant line from the
chnagelog:

    - Issue #28563: Fixed possible DoS and arbitrary code execution when handle
      plural form selections in the gettext module. The expression parser now
      supports exact syntax supported by GNU gettext.

Vincent already mentioned the related upstream bug earlier in this
Laucnhpad bug report.