Twisted-web August 2016

twisted-web@python.org

3 participants
11 discussions

Start a nNew thread

Test

by Philippe Lafoucrière

Hi all just a test

5 months, 2 weeks

Nevow 0.14.2 release

by Tristan Seligmann

Hi all, I've just released Nevow 0.14.2[1]. The list of changes from 0.14.0[2] is as follows: Features Nevow will now correctly map the MIME type of SVG files even if the platform registry does not have such a mapping. (#88) Athena no longer logs widget instantiation on initial page load. (#92) Bugfixes Nevow's test suite is now compatible with Twisted 16.3. (#82) Athena will no longer cause spurious errors resulting from page disconnection. (#84) Athena will now ignore responses to already-responded remote calls during page shutdown. (#86) Improved Documentation Nevow's NEWS file is now generated from news fragments by towncrier. (#81) [1] Available from PyPI, as always: https://pypi.python.org/pypi/Nevow/ [2] What happened to 0.14.2? A release engineering mishap during uploading 0.14.1 required rolling a new release; there are no further changes in 0.14.2 from 0.14.1 besides the version number and NEWS.

5 years, 4 months

Twisted 16.4.0 Release Announcement

by Amber "Hawkie" Brown

On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 16.4.0. The highlights of this release are: - twist, a new command line tool for running Twisted plugins, similar to twistd but with a simpler, cleaner interface. - A new interface for Protocols, IHandshakeListener, which tells Twisted to tell the Protocol when the TLS handshake has been completed. - async/await support for Deferreds, allowing you to write Python 3.5+ coroutines using Twisted - Trial can be invoked with "python -m twisted.trial". - All Twisted executables (trial, twistd, etc) are now Setuptools console scripts, meaning they will work much better on Windows. - 35+ more modules ported to Python 3, and many many cleanups on the way to Python 3 on Windows support. - All the security fixes of Twisted 16.3.1 + 16.3.2 (httpoxy, HTTP session identifier strengthening, HTTP+TLS consuming sockets) - 240+ closed tickets overall. For more information, check the NEWS file (link provided below). You can find the downloads at <https://pypi.python.org/pypi/Twisted <https://pypi.python.org/pypi/Twisted>> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads <http://twistedmatrix.com/trac/wiki/Downloads>>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS <https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS>>. Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted! Twisted Regards, Amber Brown (HawkOwl) PS: Twisted 16.4.1 will be coming soon after this with a patch mitigating SWEET32, by updating the acceptable cipher list.

5 years, 4 months

Twisted 16.3.2/16.4.0 Release Errata

by Amber "Hawkie" Brown

Hi everyone, Just a note to say that the HTTP/1 + TLS leaking CLOSE_WAIT sockets issue, fixed in 16.3.2 and 16.4.0, has been assigned a CVE, CVE-2016-7100. It'll start showing up on the various CVE databases soon. - Amber

5 years, 4 months

Twisted 16.4.1 Prerelease 1 Announcement

by Amber "Hawkie" Brown

Hello again everyone, I bring you a prerelease of the Twisted 16.4.1 security fix release, thus deemed 16.4.1pre1. This release contains: - A mitigation for SWEET32 (https://www.openssl.org/blog/blog/2016/08/24/sweet32/ <https://www.openssl.org/blog/blog/2016/08/24/sweet32/>). - The inclusion of ChaCha20 to our TLS cipher suite, providing your underlying OpenSSL supports it. Please note that the SWEET32 mitigation will break TLS from IE on Windows XP. This shouldn't be an issue for you (hopefully), but if you need to support those poor XP using souls, you can add 3DES back to your CertificateOptions yourself. As usual, it's available for download -- go here (https://twistedmatrix.com/Releases/pre/16.4.1pre1/ <https://twistedmatrix.com/Releases/pre/16.4.1pre1/>) to get the prerelease tarballs and the full NEWS file. If you want to install it right away, run: pip install https://twistedmatrix.com/Releases/pre/16.4.1pre1/Twisted-16.4.1rc1.tar.bz2 <https://twistedmatrix.com/Releases/pre/16.4.1pre1/Twisted-16.4.1rc1.tar.bz2> Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :) Have fun, and stay secure! Twisted Regards, Amber Brown (HawkOwl)

5 years, 4 months

Twisted 16.4.0 Prerelease 2 Announcement

by Amber "Hawkie" Brown

Hi everyone! I bring you a new Twisted 16.4.0 prerelease, with the following fixes: - Twisted's HTTP server, when operating over TLS, would not cleanly close sockets, causing it to build up CLOSE_WAIT sockets until it would eventually run out of file descriptors. (from 16.3.2) - AMP no longer fails on floats on Python 3. For more information, check the NEWS file (link provided below). As usual, it's available for download -- go here (https://twistedmatrix.com/Releases/pre/16.4.0pre2/ <https://twistedmatrix.com/Releases/pre/16.4.0pre2/>) to get the prerelease tarballs and the full NEWS file. If you want to install it right away, run: pip install https://twistedmatrix.com/Releases/pre/16.4.0pre2/Twisted-16.4.0rc2.tar.bz2 <https://twistedmatrix.com/Releases/pre/16.4.0pre2/Twisted-16.4.0rc2.tar.bz2> Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :) Twisted Regards, Amber Brown (HawkOwl)

5 years, 5 months

Twisted 16.3.2 Release Announcement

by Amber "Hawkie" Brown

On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 16.3.1. This is a security fix release, and is recommended for all users of Twisted. The fixes contained are: - Twisted's HTTP server, when operating over TLS, would not cleanly close sockets, causing it to build up CLOSE_WAIT sockets until it would eventually run out of file descriptors. For more information, check the NEWS file (link provided below). You can find the downloads at <https://pypi.python.org/pypi/Twisted <https://pypi.python.org/pypi/Twisted>> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads <http://twistedmatrix.com/trac/wiki/Downloads>>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-16.3.2/NEWS <https://github.com/twisted/twisted/blob/twisted-16.3.2/NEWS>>. Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted! Twisted Regards, Amber Brown (HawkOwl)

5 years, 5 months

Twisted 16.3.1 Release Announcement

by Amber "Hawkie" Brown

On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 16.3.1. This is a bug fix & security fix release, and is recommended for all users of Twisted. The fixes are: - A bugfix for a HTTP/2 edge case, - Fix for CVE-2008-7317 (generating potentially guessable HTTP session identifiers) - Fix for CVE-2008-7318 (sending secure session cookies over insecured connections) - Fix for CVE-2016-1000111 (http://httpoxy.org/ <http://httpoxy.org/>) For more information, check the NEWS file (link provided below). You can find the downloads at <https://pypi.python.org/pypi/Twisted <https://pypi.python.org/pypi/Twisted>> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads <http://twistedmatrix.com/trac/wiki/Downloads>>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-16.3.1/NEWS <https://github.com/twisted/twisted/blob/twisted-16.3.1/NEWS>>. Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted! Twisted Regards, Amber Brown (HawkOwl)

5 years, 5 months

Re: [Twisted-web] [Twisted-Python] Twisted 16.4.0 Prerelease 1 Announcement

by Glyph Lefkowitz

> On Aug 14, 2016, at 9:18 PM, John Santos <JOHN(a)egh.com> wrote: > > > Quick check with my app (Python 2.7) which uses twisted.conch and t.c.insults > pretty heavily shows no problems with Twisted 16.4.0. > > I really appreciate the Twisted project's attention to backwards > compatibility, though someday I will port this to Python 3 :-) Thanks a ton for testing the upgrade! -g

5 years, 5 months

Twisted 16.4.0 Prerelease 1 Announcement

by Amber "Hawkie" Brown

In a rare Twisted release double feature right after 16.3.1, I bring you the first prerelease of Twisted 16.4.0. This is a big release, the first after the Git migration has really kicked in! And so, here's what it brings us: - twist, a new command line tool for running Twisted plugins, similar to twistd but with a simpler, cleaner interface. - A new interface for Protocols, IHandshakeListener, which tells Twisted to tell the Protocol when the TLS handshake has been completed. - async/await support for Deferreds, allowing you to write Python 3.5+ coroutines using Twisted - Trial can be invoked with "python -m twisted.trial". - 35+ more modules ported to Python 3, and many many cleanups on the way to Python 3 on Windows support. - 240+ closed tickets overall. For more information, check the NEWS file (link provided below). As usual, it's available for download -- go here (https://twistedmatrix.com/Releases/pre/16.4.0pre1/ <https://twistedmatrix.com/Releases/pre/16.4.0pre1/>) to get the prerelease tarballs and the full NEWS file. If you want to install it right away, run: pip install https://twistedmatrix.com/Releases/pre/16.4.0pre1/Twisted-16.4.0rc1.tar.bz2 <https://twistedmatrix.com/Releases/pre/16.4.0pre1/Twisted-16.4.0rc1.tar.bz2> Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :) Twisted Regards, Amber Brown (HawkOwl)

5 years, 5 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

Twisted-web August 2016