Daniel Garcia
d509d3561b
* Security Improvements:
- Previously, malformed multipart-form-data requests could log
multiple warnings and constitute a denial-of-service attack. Now
an exception is raised at the first error, so there is only one
log message per request. This fixes CVE-2025-47287.
* General Changes:
- Python 3.14 is now supported. Older versions of Tornado will
work on Python 3.14 but may log deprecation warnings.
- The free-threading mode of Python 3.13 is now supported on an
experimental basis. Prebuilt wheels are not yet available for
this configuration, but it can be built from source.
- The minimum supported Python version is 3.9.
* Deprecation Notices:
- Support for obs-fold continuation lines in HTTP headers is
deprecated and will be removed in Tornado 7.0, as is the use of
carriage returns without line feeds as header separators.
- The callback argument to websocket_connect is deprecated and
will be removed in Tornado 7.0. Note that on_message_callback is
not deprecated.
- The log_message and args attributes of tornado.web.HTTPError are
deprecated. Use the new get_message method instead.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-tornado6?expand=0&rev=46
38 lines
1.4 KiB
Diff
38 lines
1.4 KiB
Diff
Index: tornado-6.0.4/tornado/util.py
|
|
===================================================================
|
|
--- tornado-6.0.4.orig/tornado/util.py 2020-03-11 11:42:49.610254636 +0100
|
|
+++ tornado-6.0.4/tornado/util.py 2020-03-11 11:43:51.470603323 +0100
|
|
@@ -468,5 +468,7 @@ else:
|
|
def doctests():
|
|
# type: () -> unittest.TestSuite
|
|
import doctest
|
|
+ import warnings
|
|
+ warnings.simplefilter("ignore", ResourceWarning)
|
|
|
|
return doctest.DocTestSuite()
|
|
Index: tornado-6.0.4/tornado/httputil.py
|
|
===================================================================
|
|
--- tornado-6.0.4.orig/tornado/httputil.py 2020-03-11 11:42:49.610254636 +0100
|
|
+++ tornado-6.0.4/tornado/httputil.py 2020-03-11 11:44:46.178911693 +0100
|
|
@@ -1032,6 +1032,8 @@ def encode_username_password(
|
|
def doctests():
|
|
# type: () -> unittest.TestSuite
|
|
import doctest
|
|
+ import warnings
|
|
+ warnings.simplefilter("ignore", ResourceWarning)
|
|
|
|
return doctest.DocTestSuite()
|
|
|
|
Index: tornado-6.0.4/tornado/iostream.py
|
|
===================================================================
|
|
--- tornado-6.0.4.orig/tornado/iostream.py 2020-03-11 11:42:49.610254636 +0100
|
|
+++ tornado-6.0.4/tornado/iostream.py 2020-03-11 11:45:31.015164413 +0100
|
|
@@ -1677,5 +1677,7 @@ class PipeIOStream(BaseIOStream):
|
|
|
|
def doctests() -> Any:
|
|
import doctest
|
|
+ import warnings
|
|
+ warnings.simplefilter("ignore", ResourceWarning)
|
|
|
|
return doctest.DocTestSuite()
|