[Python-modules-team] Bug#661670: python-beaker: _delete_cookie broken on leap day

[jasen betts]

Package: python-beaker
Version: 1.5.4-4
Severity: normal


 tail end of the backtrace:

 File "/usr/lib/pymodules/python2.6/beaker/session.py", line 594, in delete
   self._session().delete()
 File "/usr/lib/pymodules/python2.6/beaker/session.py", line 196, in delete
   self._delete_cookie()
 File "/usr/lib/pymodules/python2.6/beaker/session.py", line 186, in _delete_cookie
   expires = datetime.today().replace(year=2003)
 ValueError: day is out of range for month
    
Today is the 29th of february,
2003 didn't have one of them!

from the error message it looks like poorly thought-out code 
it should probably also use a constant time value (eg: noon).  else it's likely to hit
invalid times when hitting the daylight savings boundary


-- System Information:
Debian Release: 6.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-openvz-686 (SMP w/8 CPU cores)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python-beaker depends on:
ii  python                  2.6.6-3+squeeze6 interactive high-level object-orie
ii  python-support          1.0.10           automated rebuilding support for P

Versions of packages python-beaker recommends:
ii  python-pkg-resources          0.6.14-4   Package Discovery and Resource Acc

Versions of packages python-beaker suggests:
pn  python-pycryptopp | python-cr <none>     (no description available)
pn  python-pylibmc | python-memca <none>     (no description available)
ii  python-sqlalchemy             0.6.3-3    SQL toolkit and Object Relational 

-- no debconf information