Hello community, here is the log from the commit of package python-tornado for openSUSE:Factory checked in at 2015-09-30 05:52:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-tornado (Old) and /work/SRC/openSUSE:Factory/.python-tornado.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-tornado" Changes: -------- --- /work/SRC/openSUSE:Factory/python-tornado/python-tornado.changes 2015-04-23 08:05:02.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python-tornado.new/python-tornado.changes 2015-09-30 05:52:14.000000000 +0200 @@ -1,0 +2,40 @@ +Sat Sep 26 10:21:28 UTC 2015 - [email protected] + +- python-certifi is a hard dependency, not an optional one. + +------------------------------------------------------------------- +Wed Sep 23 10:39:53 UTC 2015 - [email protected] + +- Remove python-Twisted BuildRequires. It causes a python-cryptography build + dependency, which is currently broken on SLE11SP4 due to old OpenSSL version + +------------------------------------------------------------------- +Thu Sep 10 19:39:18 UTC 2015 - [email protected] + +- Update to 4.2.1: + Security fix: + * This release fixes a path traversal vulnerability in StaticFileHandler, + in which files whose names started with the static_path directory + but were not actually in that directory could be accessed. +- Update to 4.2: + Backwards-compatibility: + * SSLIOStream.connect and IOStream.start_tls now + validate certificates by default. + * Certificate validation will now use the system CA root certificates + instead of certifi when possible (i.e. Python 2.7.9+ or 3.4+). + This includes IOStream and simple_httpclient, but not curl_httpclient + * The default SSL configuration has become stricter, + using ssl.create_default_context where available on the client side. + (On the server side, applications are encouraged to migrate from + the ssl_options dict-based API to pass an ssl.SSLContext instead). + * The deprecated classes in the tornado.auth module, GoogleMixin, + FacebookMixin, and FriendFeedMixin have been removed. + * see more details: + http://www.tornadoweb.org/en/stable/releases/v4.2.0.html + +------------------------------------------------------------------- +Wed Aug 12 14:29:56 UTC 2015 - [email protected] + +- fix build with non-SUSE distributions + +------------------------------------------------------------------- Old: ---- tornado-4.1.tar.gz New: ---- tornado-4.2.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-tornado.spec ++++++ --- /var/tmp/diff_new_pack.jv0mRZ/_old 2015-09-30 05:52:15.000000000 +0200 +++ /var/tmp/diff_new_pack.jv0mRZ/_new 2015-09-30 05:52:15.000000000 +0200 @@ -17,7 +17,7 @@ Name: python-tornado -Version: 4.1 +Version: 4.2.1 Release: 0 Url: http://www.tornadoweb.org Summary: Open source version of scalable, non-blocking web server that power FriendFeed @@ -25,21 +25,23 @@ Group: Development/Languages/Python Source: https://pypi.python.org/packages/source/t/tornado/tornado-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-build -BuildRequires: python-Twisted BuildRequires: python-backports.ssl_match_hostname BuildRequires: python-devel +BuildRequires: python-certifi BuildRequires: python-futures BuildRequires: python-pycurl BuildRequires: python-setuptools BuildRequires: python-simplejson Requires: python-backports.ssl_match_hostname +Requires: python-certifi Requires: python-simplejson +%if 0%{?suse_version} Recommends: python-futures Recommends: python-pycares Recommends: python-pycurl Recommends: python-Twisted -Recommends: python-certifi Recommends: python-service_identity +%endif BuildRequires: fdupes %if 0%{?suse_version} <= 1110 %{!?python_sitearch: %global python_sitearch %(python -c "from distutils.sysconfig import get_python_lib; print get_python_lib(True);")} ++++++ tornado-4.1.tar.gz -> tornado-4.2.1.tar.gz ++++++ ++++ 14842 lines of diff (skipped)
