CVS commit: pkgsrc/www/py-tornado

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Jun  7 05:33:07 UTC 2024

Modified Files:
        pkgsrc/www/py-tornado: Makefile distinfo

Log Message:
py-tornado: updated to 6.4.1

What’s new in Tornado 6.4.1

Security Improvements

Parsing of the Transfer-Encoding header is now stricter. Unexpected transfer-encoding values were previously ignored and treated as the HTTP/1.0 default of read-until-close. This can lead to framing 
issues with certain proxies. We now treat any unexpected value as an error.
Handling of whitespace in headers now matches the RFC more closely. Only space and tab characters are treated as whitespace and stripped from the beginning and end of header values. Other unicode 
whitespace characters are now left alone. This could also lead to framing issues with certain proxies.
tornado.curl_httpclient now prohibits carriage return and linefeed headers in HTTP headers (matching the behavior of simple_httpclient). These characters could be used for header injection or request 
smuggling if untrusted data were used in headers.

General Changes

tornado.iostream

SSLIOStream now understands changes to error codes from OpenSSL 3.2. The main result of this change is to reduce the noise in the logs for certain errors.
tornado.simple_httpclient

simple_httpclient now prohibits carriage return characters in HTTP headers. It had previously prohibited only linefeed characters.
tornado.testing

AsyncTestCase subclasses can now be instantiated without being associated with a test method. This improves compatibility with test discovery in Pytest 8.2.


To generate a diff of this commit:
cvs rdiff -u -r1.35 -r1.36 pkgsrc/www/py-tornado/Makefile
cvs rdiff -u -r1.27 -r1.28 pkgsrc/www/py-tornado/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-tornado/Makefile
diff -u pkgsrc/www/py-tornado/Makefile:1.35 pkgsrc/www/py-tornado/Makefile:1.36
--- pkgsrc/www/py-tornado/Makefile:1.35 Thu Dec  7 17:08:05 2023
+++ pkgsrc/www/py-tornado/Makefile      Fri Jun  7 05:33:07 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.35 2023/12/07 17:08:05 adam Exp $
+# $NetBSD: Makefile,v 1.36 2024/06/07 05:33:07 adam Exp $
 
-DISTNAME=      tornado-6.4
+DISTNAME=      tornado-6.4.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=t/tornado/}

Index: pkgsrc/www/py-tornado/distinfo
diff -u pkgsrc/www/py-tornado/distinfo:1.27 pkgsrc/www/py-tornado/distinfo:1.28
--- pkgsrc/www/py-tornado/distinfo:1.27 Thu Dec  7 17:08:05 2023
+++ pkgsrc/www/py-tornado/distinfo      Fri Jun  7 05:33:07 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.27 2023/12/07 17:08:05 adam Exp $
+$NetBSD: distinfo,v 1.28 2024/06/07 05:33:07 adam Exp $
 
-BLAKE2s (tornado-6.4.tar.gz) = 60c8a7ae04c1c73ad973a9a1d49f68ac706a2de69001e7fc61a3d84832f45ef8
-SHA512 (tornado-6.4.tar.gz) = c063509d4c385e410c63cccdc1e9c66aa2bb739473667ede56cb801b7379b910c8059dec831d609109f3076222b588b257afd960dffa422d7a872867dcdda7c7
-Size (tornado-6.4.tar.gz) = 498845 bytes
+BLAKE2s (tornado-6.4.1.tar.gz) = 52e5f3b2213ce5cc8c1bb78f961d91f2f560d822c3830bea661f3e376882e9c8
+SHA512 (tornado-6.4.1.tar.gz) = 294b4fff8a6d1b9592d355f7faf78f1a94a2aaea1b54414b7e81884b8d4069713a28f6105ae36f27be78abf4c47a1fceab3801bc92b5429374f7a534f104c437
+Size (tornado-6.4.1.tar.gz) = 500623 bytes