Mailman 3 August 2016 - Twisted-web

Test
by Philippe Lafoucrière 05 Aug '21

05 Aug '21

Hi all just a test

3 2

Nevow 0.14.2 release
by Tristan Seligmann 30 Aug '16

30 Aug '16

Hi all, I've just released Nevow 0.14.2[1]. The list of changes from 0.14.0[2] is as follows: Features Nevow will now correctly map the MIME type of SVG files even if the platform registry does not have such a mapping. (#88) Athena no longer logs widget instantiation on initial page load. (#92) Bugfixes Nevow's test suite is now compatible with Twisted 16.3. (#82) Athena will no longer cause spurious errors resulting from page disconnection. (#84) Athena will now ignore responses to already-responded remote calls during page shutdown. (#86) Improved Documentation Nevow's NEWS file is now generated from news fragments by towncrier. (#81) [1] Available from PyPI, as always: https://pypi.python.org/pypi/Nevow/ [2] What happened to 0.14.2? A release engineering mishap during uploading 0.14.1 required rolling a new release; there are no further changes in 0.14.2 from 0.14.1 besides the version number and NEWS.

1 0

Twisted 16.4.0 Release Announcement
by Amber "Hawkie" Brown 29 Aug '16

29 Aug '16

On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 16.4.0. The highlights of this release are: - twist, a new command line tool for running Twisted plugins, similar to twistd but with a simpler, cleaner interface. - A new interface for Protocols, IHandshakeListener, which tells Twisted to tell the Protocol when the TLS handshake has been completed. - async/await support for Deferreds, allowing you to write Python 3.5+ coroutines using Twisted - Trial can be invoked with "python -m twisted.trial". - All Twisted executables (trial, twistd, etc) are now Setuptools console scripts, meaning they will work much better on Windows. - 35+ more modules ported to Python 3, and many many cleanups on the way to Python 3 on Windows support. - All the security fixes of Twisted 16.3.1 + 16.3.2 (httpoxy, HTTP session identifier strengthening, HTTP+TLS consuming sockets) - 240+ closed tickets overall. For more information, check the NEWS file (link provided below). You can find the downloads at <https://pypi.python.org/pypi/Twisted <https://pypi.python.org/pypi/Twisted>> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads <http://twistedmatrix.com/trac/wiki/Downloads>>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS <https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS>>. Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted! Twisted Regards, Amber Brown (HawkOwl) PS: Twisted 16.4.1 will be coming soon after this with a patch mitigating SWEET32, by updating the acceptable cipher list.

2 1

Twisted 16.3.2/16.4.0 Release Errata
by Amber "Hawkie" Brown 28 Aug '16

28 Aug '16

Hi everyone, Just a note to say that the HTTP/1 + TLS leaking CLOSE_WAIT sockets issue, fixed in 16.3.2 and 16.4.0, has been assigned a CVE, CVE-2016-7100. It'll start showing up on the various CVE databases soon. - Amber

1 0

Twisted 16.4.1 Prerelease 1 Announcement
by Amber "Hawkie" Brown 28 Aug '16

28 Aug '16

Hello again everyone, I bring you a prerelease of the Twisted 16.4.1 security fix release, thus deemed 16.4.1pre1. This release contains: - A mitigation for SWEET32 (https://www.openssl.org/blog/blog/2016/08/24/sweet32/ <https://www.openssl.org/blog/blog/2016/08/24/sweet32/>). - The inclusion of ChaCha20 to our TLS cipher suite, providing your underlying OpenSSL supports it. Please note that the SWEET32 mitigation will break TLS from IE on Windows XP. This shouldn't be an issue for you (hopefully), but if you need to support those poor XP using souls, you can add 3DES back to your CertificateOptions yourself. As usual, it's available for download -- go here (https://twistedmatrix.com/Releases/pre/16.4.1pre1/ <https://twistedmatrix.com/Releases/pre/16.4.1pre1/>) to get the prerelease tarballs and the full NEWS file. If you want to install it right away, run: pip install https://twistedmatrix.com/Releases/pre/16.4.1pre1/Twisted-16.4.1rc1.tar.bz2 <https://twistedmatrix.com/Releases/pre/16.4.1pre1/Twisted-16.4.1rc1.tar.bz2> Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :) Have fun, and stay secure! Twisted Regards, Amber Brown (HawkOwl)

1 0

Twisted 16.4.0 Prerelease 2 Announcement
by Amber "Hawkie" Brown 21 Aug '16

21 Aug '16

Hi everyone! I bring you a new Twisted 16.4.0 prerelease, with the following fixes: - Twisted's HTTP server, when operating over TLS, would not cleanly close sockets, causing it to build up CLOSE_WAIT sockets until it would eventually run out of file descriptors. (from 16.3.2) - AMP no longer fails on floats on Python 3. For more information, check the NEWS file (link provided below). As usual, it's available for download -- go here (https://twistedmatrix.com/Releases/pre/16.4.0pre2/ <https://twistedmatrix.com/Releases/pre/16.4.0pre2/>) to get the prerelease tarballs and the full NEWS file. If you want to install it right away, run: pip install https://twistedmatrix.com/Releases/pre/16.4.0pre2/Twisted-16.4.0rc2.tar.bz2 <https://twistedmatrix.com/Releases/pre/16.4.0pre2/Twisted-16.4.0rc2.tar.bz2> Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :) Twisted Regards, Amber Brown (HawkOwl)

1 0

Twisted 16.3.2 Release Announcement
by Amber "Hawkie" Brown 19 Aug '16

19 Aug '16

On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 16.3.1. This is a security fix release, and is recommended for all users of Twisted. The fixes contained are: - Twisted's HTTP server, when operating over TLS, would not cleanly close sockets, causing it to build up CLOSE_WAIT sockets until it would eventually run out of file descriptors. For more information, check the NEWS file (link provided below). You can find the downloads at <https://pypi.python.org/pypi/Twisted <https://pypi.python.org/pypi/Twisted>> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads <http://twistedmatrix.com/trac/wiki/Downloads>>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-16.3.2/NEWS <https://github.com/twisted/twisted/blob/twisted-16.3.2/NEWS>>. Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted! Twisted Regards, Amber Brown (HawkOwl)

1 0

Twisted 16.3.1 Release Announcement
by Amber "Hawkie" Brown 16 Aug '16

16 Aug '16

On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 16.3.1. This is a bug fix & security fix release, and is recommended for all users of Twisted. The fixes are: - A bugfix for a HTTP/2 edge case, - Fix for CVE-2008-7317 (generating potentially guessable HTTP session identifiers) - Fix for CVE-2008-7318 (sending secure session cookies over insecured connections) - Fix for CVE-2016-1000111 (http://httpoxy.org/ <http://httpoxy.org/>) For more information, check the NEWS file (link provided below). You can find the downloads at <https://pypi.python.org/pypi/Twisted <https://pypi.python.org/pypi/Twisted>> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads <http://twistedmatrix.com/trac/wiki/Downloads>>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-16.3.1/NEWS <https://github.com/twisted/twisted/blob/twisted-16.3.1/NEWS>>. Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted! Twisted Regards, Amber Brown (HawkOwl)

1 0

Re: [Twisted-web] [Twisted-Python] Twisted 16.4.0 Prerelease 1 Announcement
by Glyph Lefkowitz 15 Aug '16

15 Aug '16

> On Aug 14, 2016, at 9:18 PM, John Santos <JOHN(a)egh.com> wrote: > > > Quick check with my app (Python 2.7) which uses twisted.conch and t.c.insults > pretty heavily shows no problems with Twisted 16.4.0. > > I really appreciate the Twisted project's attention to backwards > compatibility, though someday I will port this to Python 3 :-) Thanks a ton for testing the upgrade! -g

1 0

Twisted 16.4.0 Prerelease 1 Announcement
by Amber "Hawkie" Brown 14 Aug '16

14 Aug '16

In a rare Twisted release double feature right after 16.3.1, I bring you the first prerelease of Twisted 16.4.0. This is a big release, the first after the Git migration has really kicked in! And so, here's what it brings us: - twist, a new command line tool for running Twisted plugins, similar to twistd but with a simpler, cleaner interface. - A new interface for Protocols, IHandshakeListener, which tells Twisted to tell the Protocol when the TLS handshake has been completed. - async/await support for Deferreds, allowing you to write Python 3.5+ coroutines using Twisted - Trial can be invoked with "python -m twisted.trial". - 35+ more modules ported to Python 3, and many many cleanups on the way to Python 3 on Windows support. - 240+ closed tickets overall. For more information, check the NEWS file (link provided below). As usual, it's available for download -- go here (https://twistedmatrix.com/Releases/pre/16.4.0pre1/ <https://twistedmatrix.com/Releases/pre/16.4.0pre1/>) to get the prerelease tarballs and the full NEWS file. If you want to install it right away, run: pip install https://twistedmatrix.com/Releases/pre/16.4.0pre1/Twisted-16.4.0rc1.tar.bz2 <https://twistedmatrix.com/Releases/pre/16.4.0pre1/Twisted-16.4.0rc1.tar.bz2> Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :) Twisted Regards, Amber Brown (HawkOwl)

2 1