pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/www/py-tornado Update to 3.2.2:
details: https://anonhg.NetBSD.org/pkgsrc/rev/285f64a543b7
branches: trunk
changeset: 635623:285f64a543b7
user: wiz <wiz%pkgsrc.org@localhost>
date: Mon Jun 09 12:33:43 2014 +0000
description:
Update to 3.2.2:
Security fixes
~~~~~~~~~~~~~~
* The XSRF token is now encoded with a random mask on each request.
This makes it safe to include in compressed pages without being
vulnerable to the `BREACH attack <http://breachattack.com>`_.
This applies to most applications that use both the ``xsrf_cookies``
and ``gzip`` options (or have gzip applied by a proxy).
Backwards-compatibility notes
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
* If Tornado 3.2.2 is run at the same time as older versions on the same
domain, there is some potential for issues with the differing cookie
versions. The `.Application` setting ``xsrf_cookie_version=1`` can
be used for a transitional period to generate the older cookie format
on newer servers.
Other changes
~~~~~~~~~~~~~
* ``tornado.platform.asyncio`` is now compatible with ``trollius`` version 0.3.
diffstat:
www/py-tornado/Makefile | 4 ++--
www/py-tornado/distinfo | 8 ++++----
2 files changed, 6 insertions(+), 6 deletions(-)
diffs (25 lines):
diff -r f48bbe953047 -r 285f64a543b7 www/py-tornado/Makefile
--- a/www/py-tornado/Makefile Mon Jun 09 12:31:55 2014 +0000
+++ b/www/py-tornado/Makefile Mon Jun 09 12:33:43 2014 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.5 2014/05/13 13:20:58 imil Exp $
+# $NetBSD: Makefile,v 1.6 2014/06/09 12:33:43 wiz Exp $
-DISTNAME= tornado-3.2.1
+DISTNAME= tornado-3.2.2
PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
CATEGORIES= www
MASTER_SITES= http://pypi.python.org/packages/source/t/tornado/
diff -r f48bbe953047 -r 285f64a543b7 www/py-tornado/distinfo
--- a/www/py-tornado/distinfo Mon Jun 09 12:31:55 2014 +0000
+++ b/www/py-tornado/distinfo Mon Jun 09 12:33:43 2014 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.4 2014/05/13 13:20:58 imil Exp $
+$NetBSD: distinfo,v 1.5 2014/06/09 12:33:43 wiz Exp $
-SHA1 (tornado-3.2.1.tar.gz) = ac94eb6202283b410d9c2a996e02a17711bf4231
-RMD160 (tornado-3.2.1.tar.gz) = 81016e74a17ee2aea40432128569693ced17b616
-Size (tornado-3.2.1.tar.gz) = 403419 bytes
+SHA1 (tornado-3.2.2.tar.gz) = ede9603adcceaf1b6085fd5a973cec50c7391888
+RMD160 (tornado-3.2.2.tar.gz) = d1cd5f74dd32a618deb0c3e55661692a1c47f0de
+Size (tornado-3.2.2.tar.gz) = 405596 bytes
Home |
Main Index |
Thread Index |
Old Index