python/python-tornado
SHA256
14
0
Fork 0
forked from pool/python-tornado
Code Pull Requests Activity

Accepting request 330809 from home:aboe76:branches:devel:languages:python

Browse Source 
update python-tornado to 4.2.1
verison requirement for salt 2015.8.0

OBS-URL: https://build.opensuse.org/request/show/330809
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-tornado?expand=0&rev=41
This commit is contained in:
Todd R
2015-09-16 15:18:26 +00:00
committed by Git OBS Bridge
parent fbef4d6683
commit 908129fed5
4 changed files with 28 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
python-tornado.changes
View File

@@ -1,3 +1,27 @@
-------------------------------------------------------------------
Thu Sep 10 19:39:18 UTC 2015 - aboe76@gmail.com
- Update to 4.2.1:
Security fix:
* This release fixes a path traversal vulnerability in StaticFileHandler,
in which files whose names started with the static_path directory
but were not actually in that directory could be accessed.
- Update to 4.2:
Backwards-compatibility:
* SSLIOStream.connect and IOStream.start_tls now
validate certificates by default.
* Certificate validation will now use the system CA root certificates
instead of certifi when possible (i.e. Python 2.7.9+ or 3.4+).
This includes IOStream and simple_httpclient, but not curl_httpclient
* The default SSL configuration has become stricter,
using ssl.create_default_context where available on the client side.
(On the server side, applications are encouraged to migrate from
the ssl_options dict-based API to pass an ssl.SSLContext instead).
* The deprecated classes in the tornado.auth module, GoogleMixin,
FacebookMixin, and FriendFeedMixin have been removed.
* see more details:
http://www.tornadoweb.org/en/stable/releases/v4.2.0.html
-------------------------------------------------------------------
Wed Aug 12 14:29:56 UTC 2015 - seife+obs@b1-systems.com