Changelog for python3-tornado-4.4.2-2.1.x86_64.rpm :
Sun Oct 2 14:00:00 2016 arunAATTgmx.de
- update to version 4.4.2:

* Security fixes
+ A difference in cookie parsing between Tornado and web browsers
(especially when combined with Google Analytics) could allow an
attacker to set arbitrary cookies and bypass XSRF
protection. The cookie parser has been rewritten to fix this
attack.

* Backwards-compatibility notes
+ Cookies containing certain special characters (in particular
semicolon and square brackets) are now parsed differently.
+ If the cookie header contains a combination of valid and invalid
cookies, the valid ones will be returned (older versions of
Tornado would reject the entire header for a single invalid
cookie).

Sat Jul 23 14:00:00 2016 arunAATTgmx.de
- update to version 4.4.1:

* tornado.web
+ Fixed a regression in Tornado 4.4 which caused URL regexes
containing backslash escapes outside capturing groups to be
rejected.

Fri Jul 15 14:00:00 2016 arunAATTgmx.de
- update to version 4.4:

* General
+ Tornado now requires Python 2.7 or 3.3+; versions 2.6 and 3.2
are no longer supported. Pypy3 is still supported even though
its latest release is mainly based on Python 3.2.
+ The monotonic package is now supported as an alternative to
Monotime for monotonic clock support on Python 2.

* tornado.curl_httpclient
+ Failures in _curl_setup_request no longer cause the max_clients
pool to be exhausted.
+ Non-ascii header values are now handled correctly.

* tornado.gen
+ with_timeout now accepts any yieldable object (except
YieldPoint), not just tornado.concurrent.Future.

* tornado.httpclient
+ The errors raised by timeouts now indicate what state the
request was in; the error message is no longer simply “599
Timeout”.
+ Calling repr on a tornado.httpclient.HTTPError no longer raises
an error.

* tornado.httpserver
+ Int-like enums (including http.HTTPStatus) can now be used as
status codes.
+ Responses with status code 204 No Content no longer emit a
Content-Length: 0 header.

* tornado.ioloop
+ Improved performance when there are large numbers of active
timeouts.

* tornado.netutil
+ All included Resolver implementations raise IOError (or a
subclass) for any resolution failure.

* tornado.options
+ Options can now be modified with subscript syntax in addition to
attribute syntax.
+ The special variable __file__ is now available inside config
files.

* tornado.simple_httpclient
+ HTTP/1.0 (not 1.1) responses without a Content-Length header now
work correctly.

* tornado.tcpserver
+ TCPServer.bind now accepts a reuse_port argument.

* tornado.testing
+ Test sockets now always use 127.0.0.1 instead of localhost. This
avoids conflicts when the automatically-assigned port is
available on IPv4 but not IPv6, or in unusual network
configurations when localhost has multiple IP addresses.

* tornado.web
+ image/svg+xml is now on the list of compressible mime types.
+ Fixed an error on Python 3 when compression is used with
multiple Vary headers.

* tornado.websocket
+ WebSocketHandler.__init__ now uses super, which improves support
for multiple inheritance.

Sun May 8 14:00:00 2016 arunAATTgmx.de
- specfile:

* updated source url to files.pythonhosted.org

Wed Nov 11 13:00:00 2015 toddrme2178AATTgmail.com
- python3-singledispatch is required for python 3.3 and earler
(which is only still present on openSUSE 13.1)
- python3-Twisted is now available.

Sat Nov 7 13:00:00 2015 arunAATTgmx.de
- specfile:

* require backports_abc>=0.4
- update to version 4.3:
see http://www.tornadoweb.org/en/stable/releases/v4.3.0.html

Sat Sep 26 14:00:00 2015 toddrme2178AATTgmail.com
- BuildRequires python3-certifi since it is required by tests.
It is already in Requires.

Sat Jul 18 14:00:00 2015 arunAATTgmx.de
- update to version 4.2.1:

* This release fixes a path traversal vulnerability in
StaticFileHandler, in which files whose names started with the
static_path directory but were not actually in that directory
could be accessed.

Sat May 30 14:00:00 2015 arunAATTgmx.de
- update to version 4.2:

* Backwards-compatibility notes
- \"SSLIOStream.connect\" and .IOStream.start_tls now validate
certificates by default.
- Certificate validation will now use the system CA root
certificates instead of \"certifi\" when possible (i.e. Python
2.7.9+ or 3.4+). This includes .IOStream and
\"simple_httpclient\", but not \"curl_httpclient\".
- The default SSL configuration has become stricter, using
ssl.create_default_context where available on the client side.
(On the server side, applications are encouraged to migrate from
the \"ssl_options\" dict-based API to pass an ssl.SSLContext
instead).
- The deprecated classes in the tornado.auth module,
\"GoogleMixin\", \"FacebookMixin\", and \"FriendFeedMixin\" have been
removed.

* New modules: tornado.locks and tornado.queues
- These modules provide classes for coordinating coroutines,
merged from Toro http://toro.readthedocs.org
(See http://www.tornadoweb.org/en/stable/releases/v4.2.0.html for more details)

* tornado.autoreload
- Improved compatibility with Windows.
- Fixed a bug in Python 3 if a module was imported during a reload
check.

* tornado.concurrent
- .run_on_executor now accepts arguments to control which
attributes it uses to find the .IOLoop and executor.

* tornado.curl_httpclient
- Fixed a bug that would cause the client to stop processing
requests if an exception occurred in certain places while there
is a queue.

* tornado.escape
- .xhtml_escape now supports numeric character references in hex
format (\" \")

* tornado.gen
- .WaitIterator no longer uses weak references, which fixes
several garbage-collection-related bugs.
- tornado.gen.Multi and tornado.gen.multi_future (which are used
when yielding a list or dict in a coroutine) now log any
exceptions after the first if more than one .Future fails
(previously they would be logged when the .Future was
garbage-collected, but this is more reliable). Both have a new
keyword argument \"quiet_exceptions\" to suppress logging of
certain exception types; to use this argument you must call
\"Multi\" or \"multi_future\" directly instead of simply yielding a
list.
- .multi_future now works when given multiple copies of the same
.Future.
- On Python 3, catching an exception in a coroutine no longer
leads to leaks via \"Exception.__context__\".

* tornado.httpclient
- The \"raise_error\" argument now works correctly with the
synchronous .HTTPClient.
- The synchronous .HTTPClient no longer interferes with
.IOLoop.current().

* tornado.httpserver
- .HTTPServer is now a subclass of tornado.util.Configurable.

* tornado.httputil
- .HTTPHeaders can now be copied with copy.copy and copy.deepcopy.

* tornado.ioloop
- The .IOLoop constructor now has a \"make_current\" keyword
argument to control whether the new .IOLoop becomes
.IOLoop.current().
- Third-party implementations of .IOLoop should accept \"
*
*kwargs\"
in their ~.IOLoop.initialize methods and pass them to the
superclass implementation.
- .PeriodicCallback is now more efficient when the clock jumps
forward by a large amount.

* tornado.iostream
- \"SSLIOStream.connect\" and .IOStream.start_tls now validate
certificates by default.
- New method .SSLIOStream.wait_for_handshake allows server-side
applications to wait for the handshake to complete in order to
verify client certificates or use NPN/ALPN.
- The .Future returned by \"SSLIOStream.connect\" now resolves after
the handshake is complete instead of as soon as the TCP
connection is established.
- Reduced logging of SSL errors.
- .BaseIOStream.read_until_close now works correctly when a
\"streaming_callback\" is given but \"callback\" is None (i.e. when
it returns a .Future)

* tornado.locale
- New method .GettextLocale.pgettext allows additional context to be
supplied for gettext translations.

* tornado.log
- .define_logging_options now works correctly when given a
non-default \"options\" object.

* tornado.process
- New method .Subprocess.wait_for_exit is a coroutine-friendly
version of .Subprocess.set_exit_callback.

* tornado.simple_httpclient
- Improved performance on Python 3 by reusing a single
ssl.SSLContext.
- New constructor argument \"max_body_size\" controls the maximum
response size the client is willing to accept. It may be bigger
than \"max_buffer_size\" if \"streaming_callback\" is used.

* tornado.tcpserver
- .TCPServer.handle_stream may be a coroutine (so that any
exceptions it raises will be logged).

* tornado.util
- .import_object now supports unicode strings on Python 2.
- .Configurable.initialize now supports positional arguments.

* tornado.web
- Key versioning support for cookie signing. \"cookie_secret\"
application setting can now contain a dict of valid keys with
version as key. The current signing key then must be specified
via \"key_version\" setting.
- Parsing of the \"If-None-Match\" header now follows the RFC and
supports weak validators.
- Passing \"secure=False\" or \"httponly=False\" to
.RequestHandler.set_cookie now works as expected (previously
only the presence of the argument was considered and its value
was ignored).
- .RequestHandler.get_arguments now requires that its \" argument
be of type bool. This helps prevent errors caused by the
slightly dissimilar interfaces between the singular and plural
methods.
- Errors raised in \"_handle_request_exception\" are now logged more
reliably.
- .RequestHandler.redirect now works correctly when called from a
handler whose path begins with two slashes.
- Passing messages containing \"%\" characters to
tornado.web.HTTPError no longer causes broken error messages.

* tornado.websocket
- The \"on_close\" method will no longer be called more than once.
- When the other side closes a connection, we now echo the
received close code back instead of sending an empty close
frame.

Mon Feb 9 13:00:00 2015 arunAATTgmx.de
- specfile:

* update copyright year
- update to version 4.1:

* Highlights
+ If a Future contains an exception but that exception is never
examined or re-raised (e.g. by yielding the Future), a stack
trace will be logged when the Future is garbage-collected.
+ New class tornado.gen.WaitIterator provides a way to iterate
over Futures in the order they resolve.
+ The tornado.websocket module now supports compression via the
“permessage-deflate” extension. Override
WebSocketHandler.get_compression_options to enable on the server
side, and use the compression_options keyword argument to
websocket_connect on the client side.
+ When the appropriate packages are installed, it is possible to
yield asyncio.Future or Twisted Defered objects in Tornado
coroutines.

* Backwards-compatibility notes
+ HTTPServer now calls start_request with the correct
arguments. This change is backwards-incompatible, afffecting any
application which implemented HTTPServerConnectionDelegate by
following the example of Application instead of the documented
method signatures.

* tornado.concurrent
+ If a Future contains an exception but that exception is never
examined or re-raised (e.g. by yielding the Future), a stack
trace will be logged when the Future is garbage-collected.
+ Future now catches and logs exceptions in its callbacks.

* tornado.curl_httpclient
+ tornado.curl_httpclient now supports request bodies for PATCH
and custom methods.
+ tornado.curl_httpclient now supports resubmitting bodies after
following redirects for methods other than POST.
+ curl_httpclient now runs the streaming and header callbacks on
the IOLoop.
+ tornado.curl_httpclient now uses its own logger for debug output
so it can be filtered more easily.

* tornado.gen
+ New class tornado.gen.WaitIterator provides a way to iterate
over Futures in the order they resolve.
+ When the singledispatch library is available (standard on Python
3.4, available via pip install singledispatch on older
versions), the convert_yielded function can be used to make
other kinds of objects yieldable in coroutines.
+ New function tornado.gen.sleep is a coroutine-friendly analogue
to time.sleep.
+ gen.engine now correctly captures the stack context for its
callbacks.

* tornado.httpclient
+ tornado.httpclient.HTTPRequest accepts a new argument
raise_error=False to suppress the default behavior of raising an
error for non-200 response codes.

* tornado.httpserver
+ HTTPServer now calls start_request with the correct
arguments. This change is backwards-incompatible, afffecting any
application which implemented HTTPServerConnectionDelegate by
following the example of Application instead of the documented
method signatures.
+ HTTPServer now tolerates extra newlines which are sometimes
inserted between requests on keep-alive connections.
+ HTTPServer can now use keep-alive connections after a request
with a chunked body.
+ HTTPServer now always reports HTTP/1.1 instead of echoing the
request version.

* tornado.httputil
+ New function tornado.httputil.split_host_and_port for parsing
the netloc portion of URLs.
+ The context argument to HTTPServerRequest is now optional, and
if a context is supplied the remote_ip attribute is also
optional.
+ HTTPServerRequest.body is now always a byte string (previously
the default empty body would be a unicode string on python 3).
+ Header parsing now works correctly when newline-like unicode
characters are present.
+ Header parsing again supports both CRLF and bare LF line
separators.
+ Malformed multipart/form-data bodies will always be logged
quietly instead of raising an unhandled exception; previously
the behavior was inconsistent depending on the exact error.

* tornado.ioloop
+ The kqueue and select IOLoop implementations now report
writeability correctly, fixing flow control in IOStream.
+ When a new IOLoop is created, it automatically becomes “current”
for the thread if there is not already a current instance.
+ New method PeriodicCallback.is_running can be used to see
whether the PeriodicCallback has been started.

* tornado.iostream
+ IOStream.start_tls now uses the server_hostname parameter for
certificate validation.
+ SSLIOStream will no longer consume 100% CPU after certain error
conditions.
+ SSLIOStream no longer logs EBADF errors during the handshake as
they can result from nmap scans in certain modes.

* tornado.options
+ parse_config_file now always decodes the config file as utf8 on
Python 3.
+ tornado.options.define more accurately finds the module defining
the option.

* tornado.platform.asyncio
+ It is now possible to yield asyncio.Future objects in coroutines
when the singledispatch library is available and
tornado.platform.asyncio has been imported.
+ New methods tornado.platform.asyncio.to_tornado_future and
to_asyncio_future convert between the two libraries’ Future
classes.

* tornado.platform.twisted
+ It is now possible to yield Deferred objects in coroutines when
the singledispatch library is available and
tornado.platform.twisted has been imported.

* tornado.tcpclient
+ TCPClient will no longer raise an exception due to an ill-timed
timeout.

* tornado.tcpserver
+ TCPServer no longer ignores its read_chunk_size argument.

* tornado.testing
+ AsyncTestCase has better support for multiple
exceptions. Previously it would silently swallow all but the
last; now it raises the first and logs all the rest.
+ AsyncTestCase now cleans up Subprocess state on tearDown when
necessary.

* tornado.web
+ The asynchronous decorator now understands
concurrent.futures.Future in addition to
tornado.concurrent.Future.
+ StaticFileHandler no longer logs a stack trace if the connection
is closed while sending the file.
+ RequestHandler.send_error now supports a reason keyword
argument, similar to tornado.web.HTTPError.
+ RequestHandler.locale now has a property setter.
+ Application.add_handlers hostname matching now works correctly
with IPv6 literals.
+ Redirects for the Application default_host setting now match the
request protocol instead of redirecting HTTPS to HTTP.
+ Malformed _xsrf cookies are now ignored instead of causing
uncaught exceptions.
+ Application.start_request now has the same signature as
HTTPServerConnectionDelegate.start_request.

* tornado.websocket
+ The tornado.websocket module now supports compression via the
“permessage-deflate” extension. Override
WebSocketHandler.get_compression_options to enable on the server
side, and use the compression_options keyword argument to
websocket_connect on the client side.
+ WebSocketHandler no longer logs stack traces when the connection
is closed.
+ WebSocketHandler.open now accepts
*args,
*
*kw for consistency
with RequestHandler.get and related methods.
+ The Sec-WebSocket-Version header now includes all supported
versions.
+ websocket_connect now has a on_message_callback keyword argument
for callback-style use without read_message().

Mon Dec 1 13:00:00 2014 andreaAATTopensuse.org
- added python3-certifi as dependency to fix boo #907716
- removed python3-pycares from recommends as the package doesn\'t exist

Thu Oct 2 14:00:00 2014 toddrme2178AATTgmail.com
- Remove python-pycares BuildRequires since it is optional and
not in openSUSE:Factory

Wed Oct 1 14:00:00 2014 toddrme2178AATTgmail.com
- Update to version 4.0.2
+ Bug fixes

* Fixed a bug that could sometimes cause a timeout to fire after being
cancelled.

* `.AsyncTestCase` once again passes along arguments to test methods,
making it compatible with extensions such as Nose\'s test generators.

* `.StaticFileHandler` can again compress its responses when gzip is enabled.

* ``simple_httpclient`` passes its ``max_buffer_size`` argument to the
underlying stream.

* Fixed a reference cycle that can lead to increased memory consumption.

* `.add_accept_handler` will now limit the number of times it will call
`~socket.socket.accept` per `.IOLoop` iteration, addressing a potential
starvation issue.

* Improved error handling in `.IOStream.connect` (primarily for FreeBSD
systems)
- Update to version 4.0.1
+ Bug fixes

* The build will now fall back to pure-python mode if the C extension
fails to build for any reason (previously it would fall back for some
errors but not others).

* `.IOLoop.call_at` and `.IOLoop.call_later` now always return
a timeout handle for use with `.IOLoop.remove_timeout`.

* If any callback of a `.PeriodicCallback` or `.IOStream` returns a
`.Future`, any error raised in that future will now be logged
(similar to the behavior of `.IOLoop.add_callback`).

* Fixed an exception in client-side websocket connections when the
connection is closed.

* ``simple_httpclient`` once again correctly handles 204 status
codes with no content-length header.

* Fixed a regression in ``simple_httpclient`` that would result in
timeouts for certain kinds of errors.
- Update to version 4.0.0
+ Highlights

* The `tornado.web.stream_request_body` decorator allows large files to be
uploaded with limited memory usage.

* Coroutines are now faster and are used extensively throughout Tornado itself.
More methods now return `Futures <.Future>`, including most `.IOStream`
methods and `.RequestHandler.flush`.

* Many user-overridden methods are now allowed to return a `.Future`
for flow control.

* HTTP-related code is now shared between the `tornado.httpserver`,
``tornado.simple_httpclient`` and `tornado.wsgi` modules, making support
for features such as chunked and gzip encoding more consistent.
`.HTTPServer` now uses new delegate interfaces defined in `tornado.httputil`
in addition to its old single-callback interface.

* New module `tornado.tcpclient` creates TCP connections with non-blocking
DNS, SSL handshaking, and support for IPv6.
+ See more release details at
http://www.tornadoweb.org/en/stable/releases/v4.0.0.html
- Update to version 3.2.2
+ Security fixes

* The XSRF token is now encoded with a random mask on each request.
This makes it safe to include in compressed pages without being
vulnerable to the `BREACH attack `_.
This applies to most applications that use both the ``xsrf_cookies``
and ``gzip`` options (or have gzip applied by a proxy).
+ Backwards-compatibility notes

* If Tornado 3.2.2 is run at the same time as older versions on the same
domain, there is some potential for issues with the differing cookie
versions. The `.Application` setting ``xsrf_cookie_version=1`` can
be used for a transitional period to generate the older cookie format
on newer servers.
+ Other changes

* ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3.

Sun May 11 14:00:00 2014 andreaAATTopensuse.org
- new upstream version 3.2.1
- several new modules and bugfixes check website for details
http://www.tornadoweb.org/en/stable/releases.html

Sun Dec 22 13:00:00 2013 ocefpafAATTgmail.com
- Update to 3.1.1:
- StaticFileHandler no longer fails if the client requests a Range that is
larger than the entire file (Facebook has a crawler that does this).
- RequestHandler.on_connection_close now works correctly on subsequent
requests of a keep-alive connection.
- Replace python3-distribute with python3-setuptools requirements
- Use download Url as source
- Remove depreciated python(abi) requirement

Thu Apr 11 14:00:00 2013 alexandreAATTexatati.com.br
- Update to 3.0.1:
- The interface of tornado.auth.FacebookGraphMixin is now
consistent with its documentation and the rest of the module.
The get_authenticated_user and facebook_request methods return
a Future and the callback argument is optional.
- The tornado.testing.gen_test decorator will no longer be
recognized as a (broken) test by nose.
- Work around a bug in Ubuntu 13.04 betas involving an
incomplete backport of the ssl.match_hostname function.
- tornado.websocket.websocket_connect now fails cleanly when it
attempts to connect to a non-websocket url.
- tornado.testing.LogTrapTestCase once again works with byte
strings on Python 2.
- The request attribute of tornado.httpclient.HTTPResponse is
now always an HTTPRequest, never a _RequestProxy.
- Exceptions raised by the tornado.gen module now have better
messages when tuples are used as callback keys.

Sat Mar 30 13:00:00 2013 alexandreAATTexatati.com.br
- Update to 3.0:
- Please read full changelog at
http://www.tornadoweb.org/en/stable/releases/v3.0.0.html

Sun Nov 25 13:00:00 2012 alexandreAATTexatati.com.br
- Update to 2.4.1:
- Fixed a memory leak in tornado.stack_context that was especially
likely with long-running AATTgen.engine functions.
- tornado.auth.TwitterMixin now works on Python 3.
- Fixed a bug in which IOStream.read_until_close with a streaming
callback would sometimes pass the last chunk of data to the
final callback instead of the streaming callback.

Thu Nov 22 13:00:00 2012 toddrme2178AATTgmail.com
- Removed openSUSE 11.4 spec file workarounds

Thu Sep 6 14:00:00 2012 toddrme2178AATTgmail.com
- Restore BuildRequires: python3 This package depends on hash
algorithms that are only available if python3 is installed,
python3-devel will not pull them in. Building will fail if
BuildRequires: python3 is removed.

Wed Sep 5 14:00:00 2012 alexandreAATTexatati.com.br
- Update to 2.4:
- Please check changelog at
http://www.tornadoweb.org/documentation/releases/v2.4.0.html

Fri Jun 1 14:00:00 2012 alexandreAATTexatati.com.br
- Update to 2.3:
- Please check changelog at
http://www.tornadoweb.org/documentation/releases/v2.3.0.html

Fri May 18 14:00:00 2012 toddrme2178AATTgmail.com
- Fix rpmlint warnings
- Improve openSUSE 11.4 build fix
- Clean up spec file

Mon Apr 30 14:00:00 2012 toddrme2178AATTgmail.com
- Fix building python 3 package on openSUSE 11.4 x86_64
- Removed test for unsupported openSUSE versions

Sat Apr 28 14:00:00 2012 highwaystar.ruAATTgmail.com
- python3 package created