Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Step:15
python-tornado.29669
python-tornado.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File python-tornado.changes of Package python-tornado.29669
------------------------------------------------------------------- Mon May 29 14:55:51 UTC 2023 - Cliff Zhao <qzhao@suse.com> - Add tornado-Fix-an-open-redirect-in-StaticFileHandler.patch: Backport from upstream, Fix an open redirect in StaticFileHandler. Under some configurations the default_filename redirect could be exploited to redirect to an attacker-controlled site. This change refuses to redirect to URLs that could be misinterpreted (CVE-2023-28370 bsc#1211741). ------------------------------------------------------------------- Tue Sep 17 08:25:17 UTC 2019 - Vítězslav Čížek <vcizek@suse.com> - Add patch to skip tests failing with OpenSSL 1.1.1 (bsc#1149792) * it happens only when using TLS 1.3, so if user wants to use tornado, they can hand disable the TLS 1.3 and continue * add tornado-skip-failing-tests.patch ------------------------------------------------------------------- Fri Mar 16 14:46:55 CET 2018 - ro@suse.de - add tornado-testsuite_timeout.patch (bsc#1085661) extend timeouts in testsuite to allow successful build on ppc64le ------------------------------------------------------------------- Wed Mar 7 15:38:39 UTC 2018 - aplanas@suse.com - Allows Recommends and Suggest in Fedora ------------------------------------------------------------------- Tue Feb 27 18:38:27 UTC 2018 - aplanas@suse.com - Recommends only for SUSE ------------------------------------------------------------------- Tue Feb 13 19:19:32 UTC 2018 - toddrme2178@gmail.com - Update to version 4.5.3 + tornado.curl_httpclient * Improved debug logging on Python 3. + tornado.httpserver * ``Content-Length`` and ``Transfer-Encoding`` headers are no longer sent with 1xx or 204 responses (this was already true of 304 responses). * Reading chunked requests no longer leaves the connection in a broken state. + tornado.iostream * Writing a `memoryview` can no longer result in "BufferError: Existing exports of data: object cannot be re-sized". + tornado.options * Duplicate option names are now detected properly whether they use hyphens or underscores. + tornado.testing * `.AsyncHTTPTestCase.fetch` now uses ``127.0.0.1`` instead of ``localhost``, improving compatibility with systems that have partially-working ipv6 stacks. + tornado.web * It is no longer allowed to send a body with 1xx or 204 responses. + tornado.websocket * Requests with invalid websocket headers now get a response with status code 400 instead of a closed connection. ------------------------------------------------------------------- Thu Jan 4 15:56:26 UTC 2018 - jmatejek@suse.com - only buildrequire futures / singledispatch if python2 is present (fixes build in environments that don't have python2 at all) ------------------------------------------------------------------- Wed Dec 6 13:59:31 UTC 2017 - tchvatal@suse.com - Distribute license file ------------------------------------------------------------------- Wed Nov 22 22:55:01 UTC 2017 - arun@gmx.de - specfile: * removed tornado-configtest.patch: fixed upstream * update tornado-async-deprecation.patch (partly integrated) - update to version 4.5.2: * Tornado now sets the FD_CLOEXEC flag on all file descriptors it creates. This prevents hanging client connections and resource leaks when the tornado.autoreload module (or Application(debug=True)) is used. - changes from version 4.5.1: * tornado.log + Improved detection of libraries for colorized logging. * tornado.httputil + url_concat once again treats None as equivalent to an empty sequence. - changes from version 4.5.0: * long changelog, see http://www.tornadoweb.org/en/stable/releases/v4.5.0.html for details ------------------------------------------------------------------- Tue Oct 17 10:03:04 UTC 2017 - opensuse_buildservice@ojkastl.de - added %{python_module backports.ssl_match_hostname} on SLES12 GA aka SP0, to avoid build errors - explicit BuildRequires for certifi on SLES12 GA aka SP0 only ------------------------------------------------------------------- Tue Oct 17 09:24:48 UTC 2017 - opensuse_buildservice@ojkastl.de - added certifi to BuildRequires, to fix 'ImportError: No module named certifi' ------------------------------------------------------------------- Wed Aug 9 19:03:51 UTC 2017 - toddrme2178@gmail.com - Fix tests ------------------------------------------------------------------- Fri Jun 23 17:41:45 UTC 2017 - jmatejek@suse.com - in %pre, remove egg-info file if installed, because it's being replaced by a directory (bsc#1035604) ------------------------------------------------------------------- Tue Jun 13 14:57:15 UTC 2017 - jmatejek@suse.com - replace the complicated condition for requiring backports.ssl_match_hostname with unconditional requirement for Python >= 2.7.9 ------------------------------------------------------------------- Wed May 31 19:25:46 UTC 2017 - dmueller@suse.com - require python-backports.ssl_hostname only on python 2.x ------------------------------------------------------------------- Fri Apr 7 19:59:28 UTC 2017 - toddrme2178@gmail.com - update to 4.4.3 * The `tornado.auth` module has been updated for compatibility with `a change to Facebook's access_token endpoint. ------------------------------------------------------------------- Thu Apr 6 15:30:33 UTC 2017 - jmatejek@suse.com - tornado-configtest.patch: fix test failure when __file__ is not absolute - tornado-async-deprecations.patch: filter test failures due to async deprecation warnings, to fix build on python 3.6 - update for multipython build - enable test suite ------------------------------------------------------------------- Mon Nov 14 14:39:26 UTC 2016 - dmueller@suse.com - update to 4.4.2: * Tornado now requires Python 2.7 or 3.3+; versions 2.6 and 3.2 are no longer supported. Pypy3 is still supported even though its latest release is mainly based on Python 3.2. * The `monotonic <https://pypi.python.org/pypi/monotonic>`_ package is now supported as an alternative to `Monotime <https://pypi.python.org/pypi/Monotime>`_ for monotonic clock support on Python 2. ------------------------------------------------------------------- Wed Dec 23 12:48:58 UTC 2015 - jmassaguerpla@suse.com - add singledispatch and backports_abc dependencies as stated in docs/releases/v4.3.0.rst * Tornado has several new dependencies: (...) ``singledispatch`` on all Python versions prior to 3.4 (This was an optional dependency in prior versions of Tornado, and is now mandatory), and ``backports_abc>=0.4`` on all versions prior to 3.5 Since this python module works with python version >= 2.7.9 (otherwise it would be called python3-tornado, afaiu) ------------------------------------------------------------------- Wed Dec 9 11:26:45 UTC 2015 - toddrme2178@gmail.com - Switch to pypi tarball. It uses "4.3" instead of "4.3.0" ------------------------------------------------------------------- Tue Dec 8 10:51:12 UTC 2015 - kkaempf@suse.com - Update to 4.3.0 - The new async/await keywords in Python 3.5 are supported. Deprecation notice - This will be the last release of Tornado to support Python 2.6 or 3.2. See http://www.tornadoweb.org/en/stable/releases/v4.3.0.html ------------------------------------------------------------------- Sat Oct 17 11:45:08 UTC 2015 - mc@suse.com - fix macro - use package name python-backports-ssl_match_hostname on rhel7 - define py_ver where it does not exist ------------------------------------------------------------------- Wed Sep 30 09:11:37 UTC 2015 - fcastelli@suse.com - python-certifi is an optional depedency when python 2.7.9 is available. ------------------------------------------------------------------- Sat Sep 26 10:21:28 UTC 2015 - toddrme2178@gmail.com - python-certifi is a hard dependency, not an optional one. ------------------------------------------------------------------- Wed Sep 23 10:39:53 UTC 2015 - tampakrap@opensuse.org - Remove python-Twisted BuildRequires. It causes a python-cryptography build dependency, which is currently broken on SLE11SP4 due to old OpenSSL version ------------------------------------------------------------------- Thu Sep 10 19:39:18 UTC 2015 - aboe76@gmail.com - Update to 4.2.1: Security fix: * This release fixes a path traversal vulnerability in StaticFileHandler, in which files whose names started with the static_path directory but were not actually in that directory could be accessed. - Update to 4.2: Backwards-compatibility: * SSLIOStream.connect and IOStream.start_tls now validate certificates by default. * Certificate validation will now use the system CA root certificates instead of certifi when possible (i.e. Python 2.7.9+ or 3.4+). This includes IOStream and simple_httpclient, but not curl_httpclient * The default SSL configuration has become stricter, using ssl.create_default_context where available on the client side. (On the server side, applications are encouraged to migrate from the ssl_options dict-based API to pass an ssl.SSLContext instead). * The deprecated classes in the tornado.auth module, GoogleMixin, FacebookMixin, and FriendFeedMixin have been removed. * see more details: http://www.tornadoweb.org/en/stable/releases/v4.2.0.html ------------------------------------------------------------------- Wed Aug 12 14:29:56 UTC 2015 - seife+obs@b1-systems.com - fix build with non-SUSE distributions ------------------------------------------------------------------- Wed Apr 22 13:21:19 UTC 2015 - mcihar@suse.cz - Update to 4.1: * If a `.Future` contains an exception but that exception is never examined or re-raised (e.g. by yielding the `.Future`), a stack trace will be logged when the `.Future` is garbage-collected. * New class `tornado.gen.WaitIterator` provides a way to iterate over ``Futures`` in the order they resolve. * The `tornado.websocket` module now supports compression via the "permessage-deflate" extension. Override `.WebSocketHandler.get_compression_options` to enable on the server side, and use the ``compression_options`` keyword argument to `.websocket_connect` on the client side. * When the appropriate packages are installed, it is possible to yield `asyncio.Future` or Twisted ``Defered`` objects in Tornado coroutines. ------------------------------------------------------------------- Thu Oct 2 16:05:54 UTC 2014 - toddrme2178@gmail.com - Remove python-pycares BuildRequires since it is optional and not in openSUSE:Factory ------------------------------------------------------------------- Wed Oct 1 15:23:31 UTC 2014 - toddrme2178@gmail.com - Update to version 4.0.2 + Bug fixes * Fixed a bug that could sometimes cause a timeout to fire after being cancelled. * `.AsyncTestCase` once again passes along arguments to test methods, making it compatible with extensions such as Nose's test generators. * `.StaticFileHandler` can again compress its responses when gzip is enabled. * ``simple_httpclient`` passes its ``max_buffer_size`` argument to the underlying stream. * Fixed a reference cycle that can lead to increased memory consumption. * `.add_accept_handler` will now limit the number of times it will call `~socket.socket.accept` per `.IOLoop` iteration, addressing a potential starvation issue. * Improved error handling in `.IOStream.connect` (primarily for FreeBSD systems) - Update to version 4.0.1 + Bug fixes * The build will now fall back to pure-python mode if the C extension fails to build for any reason (previously it would fall back for some errors but not others). * `.IOLoop.call_at` and `.IOLoop.call_later` now always return a timeout handle for use with `.IOLoop.remove_timeout`. * If any callback of a `.PeriodicCallback` or `.IOStream` returns a `.Future`, any error raised in that future will now be logged (similar to the behavior of `.IOLoop.add_callback`). * Fixed an exception in client-side websocket connections when the connection is closed. * ``simple_httpclient`` once again correctly handles 204 status codes with no content-length header. * Fixed a regression in ``simple_httpclient`` that would result in timeouts for certain kinds of errors. - Update to version 4.0.0 + Highlights * The `tornado.web.stream_request_body` decorator allows large files to be uploaded with limited memory usage. * Coroutines are now faster and are used extensively throughout Tornado itself. More methods now return `Futures <.Future>`, including most `.IOStream` methods and `.RequestHandler.flush`. * Many user-overridden methods are now allowed to return a `.Future` for flow control. * HTTP-related code is now shared between the `tornado.httpserver`, ``tornado.simple_httpclient`` and `tornado.wsgi` modules, making support for features such as chunked and gzip encoding more consistent. `.HTTPServer` now uses new delegate interfaces defined in `tornado.httputil` in addition to its old single-callback interface. * New module `tornado.tcpclient` creates TCP connections with non-blocking DNS, SSL handshaking, and support for IPv6. + See more release details at http://www.tornadoweb.org/en/stable/releases/v4.0.0.html - Update to version 3.2.2 + Security fixes * The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the `BREACH attack <http://breachattack.com>`_. This applies to most applications that use both the ``xsrf_cookies`` and ``gzip`` options (or have gzip applied by a proxy). + Backwards-compatibility notes * If Tornado 3.2.2 is run at the same time as older versions on the same domain, there is some potential for issues with the differing cookie versions. The `.Application` setting ``xsrf_cookie_version=1`` can be used for a transitional period to generate the older cookie format on newer servers. + Other changes * ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3. ------------------------------------------------------------------- Tue May 20 13:05:18 UTC 2014 - toddrme2178@gmail.com - Update dependencies ------------------------------------------------------------------- Sun May 11 14:00:00 UTC 2014 - andrea@opensuse.org - new upstream version 3.2.1 - several new modules and bugfixes check website for details http://www.tornadoweb.org/en/stable/releases.html ------------------------------------------------------------------- Sun Nov 17 16:07:37 UTC 2013 - p.drouand@gmail.com - Update to version 3.1.1 + StaticFileHandler no longer fails if the client requests a Range that is larger than the entire file (Facebook has a crawler that does this). + RequestHandler.on_connection_close now works correctly on subsequent requests of a keep-alive connection. ------------------------------------------------------------------- Thu Aug 15 11:03:17 UTC 2013 - speilicke@suse.com - Update to version 3.1: + See http://www.tornadoweb.org/en/stable/releases/v3.1.0.html - Fix rpmlint issues properly - Use upstream URL ------------------------------------------------------------------- Thu Apr 11 16:47:30 UTC 2013 - alexandre@exatati.com.br - Update to 3.0.1: - The interface of tornado.auth.FacebookGraphMixin is now consistent with its documentation and the rest of the module. The get_authenticated_user and facebook_request methods return a Future and the callback argument is optional. - The tornado.testing.gen_test decorator will no longer be recognized as a (broken) test by nose. - Work around a bug in Ubuntu 13.04 betas involving an incomplete backport of the ssl.match_hostname function. - tornado.websocket.websocket_connect now fails cleanly when it attempts to connect to a non-websocket url. - tornado.testing.LogTrapTestCase once again works with byte strings on Python 2. - The request attribute of tornado.httpclient.HTTPResponse is now always an HTTPRequest, never a _RequestProxy. - Exceptions raised by the tornado.gen module now have better messages when tuples are used as callback keys. ------------------------------------------------------------------- Sat Mar 30 17:46:48 UTC 2013 - alexandre@exatati.com.br - Update to 3.0: - Please read full changelog at http://www.tornadoweb.org/en/stable/releases/v3.0.0.html ------------------------------------------------------------------- Sun Nov 25 11:41:29 UTC 2012 - alexandre@exatati.com.br - Update to 2.4.1: - Fixed a memory leak in tornado.stack_context that was especially likely with long-running @gen.engine functions. - tornado.auth.TwitterMixin now works on Python 3. - Fixed a bug in which IOStream.read_until_close with a streaming callback would sometimes pass the last chunk of data to the final callback instead of the streaming callback. ------------------------------------------------------------------- Wed Sep 5 03:54:59 UTC 2012 - alexandre@exatati.com.br - Update to 2.4: - Please check changelog at http://www.tornadoweb.org/documentation/releases/v2.4.0.html ------------------------------------------------------------------- Fri Jun 1 11:59:36 UTC 2012 - alexandre@exatati.com.br - Update to 2.3: - Please check changelog at http://www.tornadoweb.org/documentation/releases/v2.3.0.html ------------------------------------------------------------------- Fri May 18 15:27:08 UTC 2012 - toddrme2178@gmail.com - Fix rpmlint warnings - Improve openSUSE 11.4 build fix - Clean up spec file ------------------------------------------------------------------- Mon Apr 30 13:06:58 UTC 2012 - toddrme2178@gmail.com - Fix building python 3 package on openSUSE 11.4 x86_64 ------------------------------------------------------------------- Sat Apr 28 05:42:29 UTC 2012 - highwaystar.ru@gmail.com - added python3 package ------------------------------------------------------------------- Tue Apr 24 11:01:28 UTC 2012 - alexandre@exatati.com.br - Update to 2.2.1: - tornado.web.RequestHandler.set_header now properly sanitizes input values to protect against header injection, response splitting, etc. (it has always attempted to do this, but the check was incorrect). Note that redirects, the most likely source of such bugs, are protected by a separate check in RequestHandler.redirect. - Colored logging configuration in tornado.options is compatible with Python 3.2.3 (and 3.3). ------------------------------------------------------------------- Wed Mar 21 18:51:00 UTC 2012 - saschpe@gmx.de - Update requires on python-curl to python-pycurl ------------------------------------------------------------------- Mon Mar 12 21:38:08 UTC 2012 - saschpe@gmx.de - Simplified macro usage - Use upstream tarball ------------------------------------------------------------------- Mon Jan 30 23:17:07 UTC 2012 - alexandre@exatati.com.br - Update to 2.2: - Please read http://www.tornadoweb.org/documentation/releases/v2.2.0.html for all changes in this release. ------------------------------------------------------------------- Tue Oct 4 23:57:09 UTC 2011 - alexandre@exatati.com.br - Update to 2.1.1 Bug fixes: - Fixed handling of closed connections with the epoll (i.e. Linux) IOLoop. Previously, closed connections could be shut down too early, which most often manifested as “Stream is closed” exceptions in SimpleAsyncHTTPClient. - Fixed a case in which chunked responses could be closed prematurely, leading to truncated output. - IOStream.connect now reports errors more consistently via logging and the close callback (this affects e.g. connections to localhost on FreeBSD). - IOStream.read_bytes again accepts both int and long arguments. - PeriodicCallback no longer runs repeatedly when IOLoop iterations complete faster than the resolution of time.time() (mainly a problem on Windows). Backwards-compatibility note - Listening for IOLoop.ERROR alone is no longer sufficient for detecting closed connections on an otherwise unused socket. IOLoop.ERROR must always be used in combination with READ or WRITE. ------------------------------------------------------------------- Wed Sep 21 11:27:02 UTC 2011 - alexandre@exatati.com.br - Update to 2.1: - There are security fixes, backwards-incompatible changes, new modules, and bug fixes. For full changes please read http://www.tornadoweb.org/documentation/releases/v2.1.0.html ------------------------------------------------------------------- Thu Jul 7 20:19:08 UTC 2011 - saschpe@gmx.de - Added README and examples to documentation - Fixed license string to "Apache-2.0" ------------------------------------------------------------------- Wed Jun 22 11:47:26 UTC 2011 - alexandre@exatati.com.br - Update to 2.0: Major changes: * Template output is automatically escaped by default; see backwards compatibility note below. * The default AsyncHTTPClient implementation is now simple_httpclient. * Python 3.2 is now supported. For backwards compatibility and other changes in this release, please read http://www.tornadoweb.org/documentation/releases/v2.0.0.html - Regenerate spec file with py2pack. ------------------------------------------------------------------- Fri Mar 4 04:10:43 UTC 2011 - alexandre@exatati.com.br - Update to 1.2.1. ------------------------------------------------------------------- Sun Feb 20 21:25:09 UTC 2011 - alexandre@exatati.com.br - Update to 1.2. ------------------------------------------------------------------- Wed Feb 9 10:51:01 UTC 2011 - alexandre@exatati.com.br - Update to 1.1.1. ------------------------------------------------------------------- Fri Sep 10 05:14:00 UTC 2010 - alexandre@exatati.com.br - Update to 1.1. ------------------------------------------------------------------- Tue May 18 12:22:11 UTC 2010 - alexandre@exatati.com.br - New tarball release on PyPI. ------------------------------------------------------------------- Fri Nov 13 00:54:15 UTC 2009 - alexandre@exatati.com.br - Update to 0.2; - Building as noarch for openSUSE >= 11.2. ------------------------------------------------------------------- Mon Sep 14 11:50:08 UTC 2009 - alexandre@exatati.com.br - Initial package (0.1) for openSUSE.
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
