Changelog for python-tornado-4.2.1-3.5.x86_64.rpm :

* Sat Oct 17 2015 mcAATTsuse.com- fix macro- use package name python-backports-ssl_match_hostname on rhel7- define py_ver where it does not exist
* Wed Sep 30 2015 fcastelliAATTsuse.com- python-certifi is an optional depedency when python 2.7.9 is available.
* Sat Sep 26 2015 toddrme2178AATTgmail.com- python-certifi is a hard dependency, not an optional one.
* Wed Sep 23 2015 tampakrapAATTopensuse.org- Remove python-Twisted BuildRequires. It causes a python-cryptography build dependency, which is currently broken on SLE11SP4 due to old OpenSSL version
* Thu Sep 10 2015 aboe76AATTgmail.com- Update to 4.2.1: Security fix:
* This release fixes a path traversal vulnerability in StaticFileHandler, in which files whose names started with the static_path directory but were not actually in that directory could be accessed.- Update to 4.2: Backwards-compatibility:
* SSLIOStream.connect and IOStream.start_tls now validate certificates by default.
* Certificate validation will now use the system CA root certificates instead of certifi when possible (i.e. Python 2.7.9+ or 3.4+). This includes IOStream and simple_httpclient, but not curl_httpclient
* The default SSL configuration has become stricter, using ssl.create_default_context where available on the client side. (On the server side, applications are encouraged to migrate from the ssl_options dict-based API to pass an ssl.SSLContext instead).
* The deprecated classes in the tornado.auth module, GoogleMixin, FacebookMixin, and FriendFeedMixin have been removed.
* see more details: http://www.tornadoweb.org/en/stable/releases/v4.2.0.html
* Wed Aug 12 2015 seife+obsAATTb1-systems.com- fix build with non-SUSE distributions
* Wed Apr 22 2015 mciharAATTsuse.cz- Update to 4.1:
* If a `.Future` contains an exception but that exception is never examined or re-raised (e.g. by yielding the `.Future`), a stack trace will be logged when the `.Future` is garbage-collected.
* New class `tornado.gen.WaitIterator` provides a way to iterate over ``Futures`` in the order they resolve.
* The `tornado.websocket` module now supports compression via the \"permessage-deflate\" extension. Override `.WebSocketHandler.get_compression_options` to enable on the server side, and use the ``compression_options`` keyword argument to `.websocket_connect` on the client side.
* When the appropriate packages are installed, it is possible to yield `asyncio.Future` or Twisted ``Defered`` objects in Tornado coroutines.
* Thu Oct 02 2014 toddrme2178AATTgmail.com- Remove python-pycares BuildRequires since it is optional and not in openSUSE:Factory
* Wed Oct 01 2014 toddrme2178AATTgmail.com- Update to version 4.0.2 + Bug fixes
* Fixed a bug that could sometimes cause a timeout to fire after being cancelled.
* `.AsyncTestCase` once again passes along arguments to test methods, making it compatible with extensions such as Nose\'s test generators.
* `.StaticFileHandler` can again compress its responses when gzip is enabled.
* ``simple_httpclient`` passes its ``max_buffer_size`` argument to the underlying stream.
* Fixed a reference cycle that can lead to increased memory consumption.
* `.add_accept_handler` will now limit the number of times it will call `~socket.socket.accept` per `.IOLoop` iteration, addressing a potential starvation issue.
* Improved error handling in `.IOStream.connect` (primarily for FreeBSD systems)- Update to version 4.0.1 + Bug fixes
* The build will now fall back to pure-python mode if the C extension fails to build for any reason (previously it would fall back for some errors but not others).
* `.IOLoop.call_at` and `.IOLoop.call_later` now always return a timeout handle for use with `.IOLoop.remove_timeout`.
* If any callback of a `.PeriodicCallback` or `.IOStream` returns a `.Future`, any error raised in that future will now be logged (similar to the behavior of `.IOLoop.add_callback`).
* Fixed an exception in client-side websocket connections when the connection is closed.
* ``simple_httpclient`` once again correctly handles 204 status codes with no content-length header.
* Fixed a regression in ``simple_httpclient`` that would result in timeouts for certain kinds of errors.- Update to version 4.0.0 + Highlights
* The `tornado.web.stream_request_body` decorator allows large files to be uploaded with limited memory usage.
* Coroutines are now faster and are used extensively throughout Tornado itself. More methods now return `Futures <.Future>`, including most `.IOStream` methods and `.RequestHandler.flush`.
* Many user-overridden methods are now allowed to return a `.Future` for flow control.
* HTTP-related code is now shared between the `tornado.httpserver`, ``tornado.simple_httpclient`` and `tornado.wsgi` modules, making support for features such as chunked and gzip encoding more consistent. `.HTTPServer` now uses new delegate interfaces defined in `tornado.httputil` in addition to its old single-callback interface.
* New module `tornado.tcpclient` creates TCP connections with non-blocking DNS, SSL handshaking, and support for IPv6. + See more release details at http://www.tornadoweb.org/en/stable/releases/v4.0.0.html- Update to version 3.2.2 + Security fixes
* The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the `BREACH attack `_. This applies to most applications that use both the ``xsrf_cookies`` and ``gzip`` options (or have gzip applied by a proxy). + Backwards-compatibility notes
* If Tornado 3.2.2 is run at the same time as older versions on the same domain, there is some potential for issues with the differing cookie versions. The `.Application` setting ``xsrf_cookie_version=1`` can be used for a transitional period to generate the older cookie format on newer servers. + Other changes
* ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3.
* Tue May 20 2014 toddrme2178AATTgmail.com- Update dependencies