From 908129fed5267dcf55dd63323b366019d6aa173ee9c4df1cb6ed9ba1ed763ad7 Mon Sep 17 00:00:00 2001 From: Todd R Date: Wed, 16 Sep 2015 15:18:26 +0000 Subject: [PATCH] Accepting request 330809 from home:aboe76:branches:devel:languages:python update python-tornado to 4.2.1 verison requirement for salt 2015.8.0 OBS-URL: https://build.opensuse.org/request/show/330809 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-tornado?expand=0&rev=41 --- python-tornado.changes | 24 ++++++++++++++++++++++++ python-tornado.spec | 2 +- tornado-4.1.tar.gz | 3 --- tornado-4.2.1.tar.gz | 3 +++ 4 files changed, 28 insertions(+), 4 deletions(-) delete mode 100644 tornado-4.1.tar.gz create mode 100644 tornado-4.2.1.tar.gz diff --git a/python-tornado.changes b/python-tornado.changes index b996148..b12d028 100644 --- a/python-tornado.changes +++ b/python-tornado.changes @@ -1,3 +1,27 @@ +------------------------------------------------------------------- +Thu Sep 10 19:39:18 UTC 2015 - aboe76@gmail.com + +- Update to 4.2.1: + Security fix: + * This release fixes a path traversal vulnerability in StaticFileHandler, + in which files whose names started with the static_path directory + but were not actually in that directory could be accessed. +- Update to 4.2: + Backwards-compatibility: + * SSLIOStream.connect and IOStream.start_tls now + validate certificates by default. + * Certificate validation will now use the system CA root certificates + instead of certifi when possible (i.e. Python 2.7.9+ or 3.4+). + This includes IOStream and simple_httpclient, but not curl_httpclient + * The default SSL configuration has become stricter, + using ssl.create_default_context where available on the client side. + (On the server side, applications are encouraged to migrate from + the ssl_options dict-based API to pass an ssl.SSLContext instead). + * The deprecated classes in the tornado.auth module, GoogleMixin, + FacebookMixin, and FriendFeedMixin have been removed. + * see more details: + http://www.tornadoweb.org/en/stable/releases/v4.2.0.html + ------------------------------------------------------------------- Wed Aug 12 14:29:56 UTC 2015 - seife+obs@b1-systems.com diff --git a/python-tornado.spec b/python-tornado.spec index d3e1a65..23c14e3 100644 --- a/python-tornado.spec +++ b/python-tornado.spec @@ -17,7 +17,7 @@ Name: python-tornado -Version: 4.1 +Version: 4.2.1 Release: 0 Url: http://www.tornadoweb.org Summary: Open source version of scalable, non-blocking web server that power FriendFeed diff --git a/tornado-4.1.tar.gz b/tornado-4.1.tar.gz deleted file mode 100644 index cbd2a13..0000000 --- a/tornado-4.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:99abd3aede45c93739346ee7384e710120121c3744da155d5cff1c0101702228 -size 332603 diff --git a/tornado-4.2.1.tar.gz b/tornado-4.2.1.tar.gz new file mode 100644 index 0000000..c208961 --- /dev/null +++ b/tornado-4.2.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a16fcdc4f76b184cb82f4f9eaeeacef6113b524b26a2cb331222e4a7fa6f2969 +size 434304