Changelog for python3-tornado-4.4.2-2.17.x86_64.rpm :

* Sun Oct 02 2016 arunAATTgmx.de- update to version 4.4.2:
* Security fixes + A difference in cookie parsing between Tornado and web browsers (especially when combined with Google Analytics) could allow an attacker to set arbitrary cookies and bypass XSRF protection. The cookie parser has been rewritten to fix this attack.
* Backwards-compatibility notes + Cookies containing certain special characters (in particular semicolon and square brackets) are now parsed differently. + If the cookie header contains a combination of valid and invalid cookies, the valid ones will be returned (older versions of Tornado would reject the entire header for a single invalid cookie).
* Sat Jul 23 2016 arunAATTgmx.de- update to version 4.4.1:
* tornado.web + Fixed a regression in Tornado 4.4 which caused URL regexes containing backslash escapes outside capturing groups to be rejected.
* Fri Jul 15 2016 arunAATTgmx.de- update to version 4.4:
* General + Tornado now requires Python 2.7 or 3.3+; versions 2.6 and 3.2 are no longer supported. Pypy3 is still supported even though its latest release is mainly based on Python 3.2. + The monotonic package is now supported as an alternative to Monotime for monotonic clock support on Python 2.
* tornado.curl_httpclient + Failures in _curl_setup_request no longer cause the max_clients pool to be exhausted. + Non-ascii header values are now handled correctly.
* tornado.gen + with_timeout now accepts any yieldable object (except YieldPoint), not just tornado.concurrent.Future.
* tornado.httpclient + The errors raised by timeouts now indicate what state the request was in; the error message is no longer simply “599 Timeout”. + Calling repr on a tornado.httpclient.HTTPError no longer raises an error.
* tornado.httpserver + Int-like enums (including http.HTTPStatus) can now be used as status codes. + Responses with status code 204 No Content no longer emit a Content-Length: 0 header.
* tornado.ioloop + Improved performance when there are large numbers of active timeouts.
* tornado.netutil + All included Resolver implementations raise IOError (or a subclass) for any resolution failure.
* tornado.options + Options can now be modified with subscript syntax in addition to attribute syntax. + The special variable __file__ is now available inside config files.
* tornado.simple_httpclient + HTTP/1.0 (not 1.1) responses without a Content-Length header now work correctly.
* tornado.tcpserver + TCPServer.bind now accepts a reuse_port argument.
* tornado.testing + Test sockets now always use 127.0.0.1 instead of localhost. This avoids conflicts when the automatically-assigned port is available on IPv4 but not IPv6, or in unusual network configurations when localhost has multiple IP addresses.
* tornado.web + image/svg+xml is now on the list of compressible mime types. + Fixed an error on Python 3 when compression is used with multiple Vary headers.
* tornado.websocket + WebSocketHandler.__init__ now uses super, which improves support for multiple inheritance.
* Sun May 08 2016 arunAATTgmx.de- specfile:
* updated source url to files.pythonhosted.org
* Wed Nov 11 2015 toddrme2178AATTgmail.com- python3-singledispatch is required for python 3.3 and earler (which is only still present on openSUSE 13.1)- python3-Twisted is now available.
* Sat Nov 07 2015 arunAATTgmx.de- specfile:
* require backports_abc>=0.4- update to version 4.3: see http://www.tornadoweb.org/en/stable/releases/v4.3.0.html
* Sat Sep 26 2015 toddrme2178AATTgmail.com- BuildRequires python3-certifi since it is required by tests. It is already in Requires.
* Sat Jul 18 2015 arunAATTgmx.de- update to version 4.2.1:
* This release fixes a path traversal vulnerability in StaticFileHandler, in which files whose names started with the static_path directory but were not actually in that directory could be accessed.
* Sat May 30 2015 arunAATTgmx.de- update to version 4.2:
* Backwards-compatibility notes - \"SSLIOStream.connect\" and .IOStream.start_tls now validate certificates by default. - Certificate validation will now use the system CA root certificates instead of \"certifi\" when possible (i.e. Python 2.7.9+ or 3.4+). This includes .IOStream and \"simple_httpclient\", but not \"curl_httpclient\". - The default SSL configuration has become stricter, using ssl.create_default_context where available on the client side. (On the server side, applications are encouraged to migrate from the \"ssl_options\" dict-based API to pass an ssl.SSLContext instead). - The deprecated classes in the tornado.auth module, \"GoogleMixin\", \"FacebookMixin\", and \"FriendFeedMixin\" have been removed.
* New modules: tornado.locks and tornado.queues - These modules provide classes for coordinating coroutines, merged from Toro http://toro.readthedocs.org (See http://www.tornadoweb.org/en/stable/releases/v4.2.0.html for more details)
* tornado.autoreload - Improved compatibility with Windows. - Fixed a bug in Python 3 if a module was imported during a reload check.
* tornado.concurrent - .run_on_executor now accepts arguments to control which attributes it uses to find the .IOLoop and executor.
* tornado.curl_httpclient - Fixed a bug that would cause the client to stop processing requests if an exception occurred in certain places while there is a queue.
* tornado.escape - .xhtml_escape now supports numeric character references in hex format (\" \")
* tornado.gen - .WaitIterator no longer uses weak references, which fixes several garbage-collection-related bugs. - tornado.gen.Multi and tornado.gen.multi_future (which are used when yielding a list or dict in a coroutine) now log any exceptions after the first if more than one .Future fails (previously they would be logged when the .Future was garbage-collected, but this is more reliable). Both have a new keyword argument \"quiet_exceptions\" to suppress logging of certain exception types; to use this argument you must call \"Multi\" or \"multi_future\" directly instead of simply yielding a list. - .multi_future now works when given multiple copies of the same .Future. - On Python 3, catching an exception in a coroutine no longer leads to leaks via \"Exception.__context__\".
* tornado.httpclient - The \"raise_error\" argument now works correctly with the synchronous .HTTPClient. - The synchronous .HTTPClient no longer interferes with .IOLoop.current().
* tornado.httpserver - .HTTPServer is now a subclass of tornado.util.Configurable.
* tornado.httputil - .HTTPHeaders can now be copied with copy.copy and copy.deepcopy.
* tornado.ioloop - The .IOLoop constructor now has a \"make_current\" keyword argument to control whether the new .IOLoop becomes .IOLoop.current(). - Third-party implementations of .IOLoop should accept \"
*
*kwargs\" in their ~.IOLoop.initialize methods and pass them to the superclass implementation. - .PeriodicCallback is now more efficient when the clock jumps forward by a large amount.
* tornado.iostream - \"SSLIOStream.connect\" and .IOStream.start_tls now validate certificates by default. - New method .SSLIOStream.wait_for_handshake allows server-side applications to wait for the handshake to complete in order to verify client certificates or use NPN/ALPN. - The .Future returned by \"SSLIOStream.connect\" now resolves after the handshake is complete instead of as soon as the TCP connection is established. - Reduced logging of SSL errors. - .BaseIOStream.read_until_close now works correctly when a \"streaming_callback\" is given but \"callback\" is None (i.e. when it returns a .Future)
* tornado.locale - New method .GettextLocale.pgettext allows additional context to be supplied for gettext translations.
* tornado.log - .define_logging_options now works correctly when given a non-default \"options\" object.
* tornado.process - New method .Subprocess.wait_for_exit is a coroutine-friendly version of .Subprocess.set_exit_callback.
* tornado.simple_httpclient - Improved performance on Python 3 by reusing a single ssl.SSLContext. - New constructor argument \"max_body_size\" controls the maximum response size the client is willing to accept. It may be bigger than \"max_buffer_size\" if \"streaming_callback\" is used.
* tornado.tcpserver - .TCPServer.handle_stream may be a coroutine (so that any exceptions it raises will be logged).
* tornado.util - .import_object now supports unicode strings on Python 2. - .Configurable.initialize now supports positional arguments.
* tornado.web - Key versioning support for cookie signing. \"cookie_secret\" application setting can now contain a dict of valid keys with version as key. The current signing key then must be specified via \"key_version\" setting. - Parsing of the \"If-None-Match\" header now follows the RFC and supports weak validators. - Passing \"secure=False\" or \"httponly=False\" to .RequestHandler.set_cookie now works as expected (previously only the presence of the argument was considered and its value was ignored). - .RequestHandler.get_arguments now requires that its \" argument be of type bool. This helps prevent errors caused by the slightly dissimilar interfaces between the singular and plural methods. - Errors raised in \"_handle_request_exception\" are now logged more reliably. - .RequestHandler.redirect now works correctly when called from a handler whose path begins with two slashes. - Passing messages containing \"%\" characters to tornado.web.HTTPError no longer causes broken error messages.
* tornado.websocket - The \"on_close\" method will no longer be called more than once. - When the other side closes a connection, we now echo the received close code back instead of sending an empty close frame.
* Mon Feb 09 2015 arunAATTgmx.de- specfile:
* update copyright year- update to version 4.1:
* Highlights + If a Future contains an exception but that exception is never examined or re-raised (e.g. by yielding the Future), a stack trace will be logged when the Future is garbage-collected. + New class tornado.gen.WaitIterator provides a way to iterate over Futures in the order they resolve. + The tornado.websocket module now supports compression via the “permessage-deflate” extension. Override WebSocketHandler.get_compression_options to enable on the server side, and use the compression_options keyword argument to websocket_connect on the client side. + When the appropriate packages are installed, it is possible to yield asyncio.Future or Twisted Defered objects in Tornado coroutines.
* Backwards-compatibility notes + HTTPServer now calls start_request with the correct arguments. This change is backwards-incompatible, afffecting any application which implemented HTTPServerConnectionDelegate by following the example of Application instead of the documented method signatures.
* tornado.concurrent + If a Future contains an exception but that exception is never examined or re-raised (e.g. by yielding the Future), a stack trace will be logged when the Future is garbage-collected. + Future now catches and logs exceptions in its callbacks.
* tornado.curl_httpclient + tornado.curl_httpclient now supports request bodies for PATCH and custom methods. + tornado.curl_httpclient now supports resubmitting bodies after following redirects for methods other than POST. + curl_httpclient now runs the streaming and header callbacks on the IOLoop. + tornado.curl_httpclient now uses its own logger for debug output so it can be filtered more easily.
* tornado.gen + New class tornado.gen.WaitIterator provides a way to iterate over Futures in the order they resolve. + When the singledispatch library is available (standard on Python 3.4, available via pip install singledispatch on older versions), the convert_yielded function can be used to make other kinds of objects yieldable in coroutines. + New function tornado.gen.sleep is a coroutine-friendly analogue to time.sleep. + gen.engine now correctly captures the stack context for its callbacks.
* tornado.httpclient + tornado.httpclient.HTTPRequest accepts a new argument raise_error=False to suppress the default behavior of raising an error for non-200 response codes.
* tornado.httpserver + HTTPServer now calls start_request with the correct arguments. This change is backwards-incompatible, afffecting any application which implemented HTTPServerConnectionDelegate by following the example of Application instead of the documented method signatures. + HTTPServer now tolerates extra newlines which are sometimes inserted between requests on keep-alive connections. + HTTPServer can now use keep-alive connections after a request with a chunked body. + HTTPServer now always reports HTTP/1.1 instead of echoing the request version.
* tornado.httputil + New function tornado.httputil.split_host_and_port for parsing the netloc portion of URLs. + The context argument to HTTPServerRequest is now optional, and if a context is supplied the remote_ip attribute is also optional. + HTTPServerRequest.body is now always a byte string (previously the default empty body would be a unicode string on python 3). + Header parsing now works correctly when newline-like unicode characters are present. + Header parsing again supports both CRLF and bare LF line separators. + Malformed multipart/form-data bodies will always be logged quietly instead of raising an unhandled exception; previously the behavior was inconsistent depending on the exact error.
* tornado.ioloop + The kqueue and select IOLoop implementations now report writeability correctly, fixing flow control in IOStream. + When a new IOLoop is created, it automatically becomes “current” for the thread if there is not already a current instance. + New method PeriodicCallback.is_running can be used to see whether the PeriodicCallback has been started.
* tornado.iostream + IOStream.start_tls now uses the server_hostname parameter for certificate validation. + SSLIOStream will no longer consume 100% CPU after certain error conditions. + SSLIOStream no longer logs EBADF errors during the handshake as they can result from nmap scans in certain modes.
* tornado.options + parse_config_file now always decodes the config file as utf8 on Python 3. + tornado.options.define more accurately finds the module defining the option.
* tornado.platform.asyncio + It is now possible to yield asyncio.Future objects in coroutines when the singledispatch library is available and tornado.platform.asyncio has been imported. + New methods tornado.platform.asyncio.to_tornado_future and to_asyncio_future convert between the two libraries’ Future classes.
* tornado.platform.twisted + It is now possible to yield Deferred objects in coroutines when the singledispatch library is available and tornado.platform.twisted has been imported.
* tornado.tcpclient + TCPClient will no longer raise an exception due to an ill-timed timeout.
* tornado.tcpserver + TCPServer no longer ignores its read_chunk_size argument.
* tornado.testing + AsyncTestCase has better support for multiple exceptions. Previously it would silently swallow all but the last; now it raises the first and logs all the rest. + AsyncTestCase now cleans up Subprocess state on tearDown when necessary.
* tornado.web + The asynchronous decorator now understands concurrent.futures.Future in addition to tornado.concurrent.Future. + StaticFileHandler no longer logs a stack trace if the connection is closed while sending the file. + RequestHandler.send_error now supports a reason keyword argument, similar to tornado.web.HTTPError. + RequestHandler.locale now has a property setter. + Application.add_handlers hostname matching now works correctly with IPv6 literals. + Redirects for the Application default_host setting now match the request protocol instead of redirecting HTTPS to HTTP. + Malformed _xsrf cookies are now ignored instead of causing uncaught exceptions. + Application.start_request now has the same signature as HTTPServerConnectionDelegate.start_request.
* tornado.websocket + The tornado.websocket module now supports compression via the “permessage-deflate” extension. Override WebSocketHandler.get_compression_options to enable on the server side, and use the compression_options keyword argument to websocket_connect on the client side. + WebSocketHandler no longer logs stack traces when the connection is closed. + WebSocketHandler.open now accepts
*args,
*
*kw for consistency with RequestHandler.get and related methods. + The Sec-WebSocket-Version header now includes all supported versions. + websocket_connect now has a on_message_callback keyword argument for callback-style use without read_message().
* Mon Dec 01 2014 andreaAATTopensuse.org- added python3-certifi as dependency to fix boo #907716- removed python3-pycares from recommends as the package doesn\'t exist
* Thu Oct 02 2014 toddrme2178AATTgmail.com- Remove python-pycares BuildRequires since it is optional and not in openSUSE:Factory
* Wed Oct 01 2014 toddrme2178AATTgmail.com- Update to version 4.0.2 + Bug fixes
* Fixed a bug that could sometimes cause a timeout to fire after being cancelled.
* `.AsyncTestCase` once again passes along arguments to test methods, making it compatible with extensions such as Nose\'s test generators.
* `.StaticFileHandler` can again compress its responses when gzip is enabled.
* ``simple_httpclient`` passes its ``max_buffer_size`` argument to the underlying stream.
* Fixed a reference cycle that can lead to increased memory consumption.
* `.add_accept_handler` will now limit the number of times it will call `~socket.socket.accept` per `.IOLoop` iteration, addressing a potential starvation issue.
* Improved error handling in `.IOStream.connect` (primarily for FreeBSD systems)- Update to version 4.0.1 + Bug fixes
* The build will now fall back to pure-python mode if the C extension fails to build for any reason (previously it would fall back for some errors but not others).
* `.IOLoop.call_at` and `.IOLoop.call_later` now always return a timeout handle for use with `.IOLoop.remove_timeout`.
* If any callback of a `.PeriodicCallback` or `.IOStream` returns a `.Future`, any error raised in that future will now be logged (similar to the behavior of `.IOLoop.add_callback`).
* Fixed an exception in client-side websocket connections when the connection is closed.
* ``simple_httpclient`` once again correctly handles 204 status codes with no content-length header.
* Fixed a regression in ``simple_httpclient`` that would result in timeouts for certain kinds of errors.- Update to version 4.0.0 + Highlights
* The `tornado.web.stream_request_body` decorator allows large files to be uploaded with limited memory usage.
* Coroutines are now faster and are used extensively throughout Tornado itself. More methods now return `Futures <.Future>`, including most `.IOStream` methods and `.RequestHandler.flush`.
* Many user-overridden methods are now allowed to return a `.Future` for flow control.
* HTTP-related code is now shared between the `tornado.httpserver`, ``tornado.simple_httpclient`` and `tornado.wsgi` modules, making support for features such as chunked and gzip encoding more consistent. `.HTTPServer` now uses new delegate interfaces defined in `tornado.httputil` in addition to its old single-callback interface.
* New module `tornado.tcpclient` creates TCP connections with non-blocking DNS, SSL handshaking, and support for IPv6. + See more release details at http://www.tornadoweb.org/en/stable/releases/v4.0.0.html- Update to version 3.2.2 + Security fixes
* The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the `BREACH attack `_. This applies to most applications that use both the ``xsrf_cookies`` and ``gzip`` options (or have gzip applied by a proxy). + Backwards-compatibility notes
* If Tornado 3.2.2 is run at the same time as older versions on the same domain, there is some potential for issues with the differing cookie versions. The `.Application` setting ``xsrf_cookie_version=1`` can be used for a transitional period to generate the older cookie format on newer servers. + Other changes
* ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3.
* Sun May 11 2014 andreaAATTopensuse.org- new upstream version 3.2.1 - several new modules and bugfixes check website for details http://www.tornadoweb.org/en/stable/releases.html
* Sun Dec 22 2013 ocefpafAATTgmail.com- Update to 3.1.1: - StaticFileHandler no longer fails if the client requests a Range that is larger than the entire file (Facebook has a crawler that does this). - RequestHandler.on_connection_close now works correctly on subsequent requests of a keep-alive connection.- Replace python3-distribute with python3-setuptools requirements- Use download Url as source- Remove depreciated python(abi) requirement
* Thu Apr 11 2013 alexandreAATTexatati.com.br- Update to 3.0.1: - The interface of tornado.auth.FacebookGraphMixin is now consistent with its documentation and the rest of the module. The get_authenticated_user and facebook_request methods return a Future and the callback argument is optional. - The tornado.testing.gen_test decorator will no longer be recognized as a (broken) test by nose. - Work around a bug in Ubuntu 13.04 betas involving an incomplete backport of the ssl.match_hostname function. - tornado.websocket.websocket_connect now fails cleanly when it attempts to connect to a non-websocket url. - tornado.testing.LogTrapTestCase once again works with byte strings on Python 2. - The request attribute of tornado.httpclient.HTTPResponse is now always an HTTPRequest, never a _RequestProxy. - Exceptions raised by the tornado.gen module now have better messages when tuples are used as callback keys.
* Sat Mar 30 2013 alexandreAATTexatati.com.br- Update to 3.0: - Please read full changelog at http://www.tornadoweb.org/en/stable/releases/v3.0.0.html
* Sun Nov 25 2012 alexandreAATTexatati.com.br- Update to 2.4.1: - Fixed a memory leak in tornado.stack_context that was especially likely with long-running AATTgen.engine functions. - tornado.auth.TwitterMixin now works on Python 3. - Fixed a bug in which IOStream.read_until_close with a streaming callback would sometimes pass the last chunk of data to the final callback instead of the streaming callback.
* Thu Nov 22 2012 toddrme2178AATTgmail.com- Removed openSUSE 11.4 spec file workarounds
* Thu Sep 06 2012 toddrme2178AATTgmail.com- Restore BuildRequires: python3 This package depends on hash algorithms that are only available if python3 is installed, python3-devel will not pull them in. Building will fail if BuildRequires: python3 is removed.
* Wed Sep 05 2012 alexandreAATTexatati.com.br- Update to 2.4: - Please check changelog at http://www.tornadoweb.org/documentation/releases/v2.4.0.html
* Fri Jun 01 2012 alexandreAATTexatati.com.br- Update to 2.3: - Please check changelog at http://www.tornadoweb.org/documentation/releases/v2.3.0.html
* Fri May 18 2012 toddrme2178AATTgmail.com- Fix rpmlint warnings- Improve openSUSE 11.4 build fix- Clean up spec file
* Mon Apr 30 2012 toddrme2178AATTgmail.com- Fix building python 3 package on openSUSE 11.4 x86_64- Removed test for unsupported openSUSE versions
* Sat Apr 28 2012 highwaystar.ruAATTgmail.com- python3 package created