pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/www/py-tornado Update to 3.2.2:



details:   https://anonhg.NetBSD.org/pkgsrc/rev/285f64a543b7
branches:  trunk
changeset: 635623:285f64a543b7
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Mon Jun 09 12:33:43 2014 +0000

description:
Update to 3.2.2:

Security fixes
~~~~~~~~~~~~~~

* The XSRF token is now encoded with a random mask on each request.
  This makes it safe to include in compressed pages without being
  vulnerable to the `BREACH attack <http://breachattack.com>`_.
  This applies to most applications that use both the ``xsrf_cookies``
  and ``gzip`` options (or have gzip applied by a proxy).

Backwards-compatibility notes
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

* If Tornado 3.2.2 is run at the same time as older versions on the same
  domain, there is some potential for issues with the differing cookie
  versions.  The `.Application` setting ``xsrf_cookie_version=1`` can
  be used for a transitional period to generate the older cookie format
  on newer servers.

Other changes
~~~~~~~~~~~~~

* ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3.

diffstat:

 www/py-tornado/Makefile |  4 ++--
 www/py-tornado/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (25 lines):

diff -r f48bbe953047 -r 285f64a543b7 www/py-tornado/Makefile
--- a/www/py-tornado/Makefile   Mon Jun 09 12:31:55 2014 +0000
+++ b/www/py-tornado/Makefile   Mon Jun 09 12:33:43 2014 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.5 2014/05/13 13:20:58 imil Exp $
+# $NetBSD: Makefile,v 1.6 2014/06/09 12:33:43 wiz Exp $
 
-DISTNAME=      tornado-3.2.1
+DISTNAME=      tornado-3.2.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www
 MASTER_SITES=  http://pypi.python.org/packages/source/t/tornado/
diff -r f48bbe953047 -r 285f64a543b7 www/py-tornado/distinfo
--- a/www/py-tornado/distinfo   Mon Jun 09 12:31:55 2014 +0000
+++ b/www/py-tornado/distinfo   Mon Jun 09 12:33:43 2014 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.4 2014/05/13 13:20:58 imil Exp $
+$NetBSD: distinfo,v 1.5 2014/06/09 12:33:43 wiz Exp $
 
-SHA1 (tornado-3.2.1.tar.gz) = ac94eb6202283b410d9c2a996e02a17711bf4231
-RMD160 (tornado-3.2.1.tar.gz) = 81016e74a17ee2aea40432128569693ced17b616
-Size (tornado-3.2.1.tar.gz) = 403419 bytes
+SHA1 (tornado-3.2.2.tar.gz) = ede9603adcceaf1b6085fd5a973cec50c7391888
+RMD160 (tornado-3.2.2.tar.gz) = d1cd5f74dd32a618deb0c3e55661692a1c47f0de
+Size (tornado-3.2.2.tar.gz) = 405596 bytes



Home | Main Index | Thread Index | Old Index