Path to this page:
Subject: CVS commit: pkgsrc/net/py-twisted
From: Adam Ciarcinski
Date: 2022-08-10 10:59:35
Message id: 20220810085935.C0513FB1A@cvs.NetBSD.org
Log Message:
py-twisted: updated to 22.4.0
Twisted 22.4.0 (2022-04-11)
===========================
Features
--------
- twisted.python.failure.Failure tracebacks now capture module information, \
improving compatibility with the Raven Sentry client.
- twisted.python.failure.Failure objects are now compatible with dis.distb, \
improving compatibility with post-mortem debuggers.
Bugfixes
- twisted.internet.interfaces.IReactorSSL.listenSSL now has correct type annotations.
- twisted.internet.test.test_glibbase.GlibReactorBaseTests now passes.
Conch
-----
Features
- twisted.conch.ssh now supports using RSA keys with SHA-2 signatures (RFC 8332) \
when acting as a server. The rsa-sha2-512 and rsa-sha2-256 public key signature \
algorithms are automatically preferred over ssh-rsa if the client advertises \
support for them; the actual public keys do not need to change.
- twisted.conch.ssh now has an alternative Ed25519 implementation using PyNaCl, \
in order to support platforms that lack OpenSSL >= 1.1.1b. The new \
"conch_nacl" extra has the necessary dependency.
Web
---
Features
- Twisted is now compatible with h2 4.x.x.
Bugfixes
- twisted.web.http had several several defects in HTTP request parsing that \
could permit HTTP request smuggling. It now disallows signed Content-Length \
headers, forbids illegal characters in chunked extensions, forbids a ``0x`` \
prefix to chunk lengths, and only strips spaces and horizontal tab characters \
from header values. These changes address CVE-2022-24801 and \
GHSA-c2jg-hw38-jrqq.
Mail
----
Bugfixes
- twisted.mail.pop3.APOPCredentials is now correctly marked as implementing \
twisted.cred.credentials.IUsernamHashedPassword, rather than IUsernamePassword.
Trial
-----
Features
- `trial --until-failure --jobs=N` now reports the number of each test pass as \
it begins.
Bugfixes
- twisted.trial.unittest.TestCase now discards cleanup functions after running \
them. Notably, this prevents them from being run an ever growing number of \
times with `trial -u ...`.
Twisted 22.2.0 (2022-03-01)
===========================
Bugfixes
- twisted.internet.gireactor.PortableGIReactor.simulate and \
twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer raises \
TypeError when there are no delayed called. This was a regression introduced \
with the migration to Python 3 in which the builtin `min` function no longer \
accepts `None` as an argument.
- twisted.conch.ssh.transport.SSHTransportBase now disconnects the remote peer if the
SSH version string is not sent in the first 4096 bytes.
GHSA-rv6r-3f5q-9rgx)
Improved Documentation
- Add type annotations for twisted.web.http.Request.getHeader.
Deprecations and Removals
- Support for Python 3.6, which is EoL as of 2021-09-04, has been deprecated.
Files: