Re: Twisted 19.10.0rc1 Release Candidate Announcement
Glyph <[email protected]> Mon, 14 Oct 2019 14:07:57 -0700
| Newsgroups | gmane.comp.python.twisted |
|---|---|
| Message-ID | <[email protected]> |
--===============1009593569926689103== Content-Type: multipart/alternative; boundary="Apple-Mail=_AC9B0C0E-9988-4BA3-978B-495CF79961AB" --Apple-Mail=_AC9B0C0E-9988-4BA3-978B-495CF79961AB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii > On Oct 14, 2019, at 1:05 AM, Amber Brown (hawkowl) = <[email protected]> wrote: >=20 > Hello everyone, it's time for more Twisted! It's always time for more Twisted > It contains: >=20 > - Security fixes for HTTP/2 -- CVE-2019-9512 (Ping Flood), = CVE-2019-9514 > (Reset Flood), and CVE-2019-9515 (Settings Flood). Thanks to Jonathan > Looney and Piotr Sikora. > - HTTP/2 fixes regarding timeouts. My understanding is that these are pretty much all resource-exhaustion = attacks? > - trial's assertResultOf, failureResultOf, and successResultOf, now > accept Deferred-awaiting coroutines. Awesome, I've been waiting for that one myself. > - Various other bug fixes for POP3, conch.ssh.keys, and > twisted.web.client.FileBodyProducer. Wow, quite an assortment of important fixes here! > You can get the tarball and the NEWS file at > https://twistedmatrix.com/Releases/rc/19.10.0rc1/ , or you can try it > out from PyPI: >=20 > python -m pip install Twisted=3D=3D19.10.0rc1 >=20 > Please test it, and let me know how your applications fare, good or = bad! > If nothing comes up, 19.10 will release in a week. >=20 > Twisted regards, >=20 > Amber Brown (hawkowl) Thanks for keeping the release train moving, Amber! Do we have any progress on a volunteer who will shadow this one / the = next one? Twisted prevails, -g --Apple-Mail=_AC9B0C0E-9988-4BA3-978B-495CF79961AB Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br = class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">On Oct 14, 2019, at 1:05 AM, Amber Brown (hawkowl) <<a = href=3D"mailto:[email protected]" = class=3D"">[email protected]</a>> wrote:</div><br = class=3D"Apple-interchange-newline"><div class=3D""><div class=3D"">Hello = everyone, it's time for more Twisted!<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div><i = class=3D""><i class=3D"">I</i>t's <b class=3D"">always</b> time for more = Twisted</i></div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div class=3D"">It contains:<br class=3D""><br class=3D"">- = Security fixes for HTTP/2 -- CVE-2019-9512 (Ping Flood), = CVE-2019-9514<br class=3D"">(Reset Flood), and CVE-2019-9515 (Settings = Flood). Thanks to Jonathan<br class=3D"">Looney and Piotr = Sikora.<br class=3D"">- HTTP/2 fixes regarding timeouts.<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>My = understanding is that these are pretty much all resource-exhaustion = attacks?</div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div class=3D"">- trial's assertResultOf, failureResultOf, = and successResultOf, now<br class=3D"">accept Deferred-awaiting = coroutines.<br class=3D""></div></div></blockquote><div><br = class=3D""></div><div>Awesome, I've been waiting for that one = myself.</div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div class=3D"">- Various other bug fixes for POP3, = conch.ssh.keys, and<br class=3D"">twisted.web.client.FileBodyProducer.<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>Wow, = quite an assortment of important fixes here!</div><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = class=3D"">You can get the tarball and the NEWS file at<br class=3D""><a = href=3D"https://twistedmatrix.com/Releases/rc/19.10.0rc1/" = class=3D"">https://twistedmatrix.com/Releases/rc/19.10.0rc1/</a> , or = you can try it<br class=3D"">out from PyPI:<br class=3D""><br class=3D""> = python -m pip install Twisted=3D=3D19.10.0rc1<br = class=3D""><br class=3D"">Please test it, and let me know how your = applications fare, good or bad!<br class=3D"">If nothing comes up, 19.10 = will release in a week.<br class=3D""><br class=3D"">Twisted regards,<br = class=3D""><br class=3D"">Amber Brown (hawkowl)<br = class=3D""></div></div></blockquote><br class=3D""></div><div>Thanks for = keeping the release train moving, Amber!</div><div><br = class=3D""></div><div>Do we have any progress on a volunteer who will = shadow this one / the next one?</div><div><br = class=3D""></div><div>Twisted prevails,</div><div><br = class=3D""></div><div>-g</div><div><br class=3D""></div></body></html>= --Apple-Mail=_AC9B0C0E-9988-4BA3-978B-495CF79961AB-- --===============1009593569926689103== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KVHdpc3RlZC1Q eXRob24gbWFpbGluZyBsaXN0ClR3aXN0ZWQtUHl0aG9uQHR3aXN0ZWRtYXRyaXguY29tCmh0dHBz Oi8vdHdpc3RlZG1hdHJpeC5jb20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3R3aXN0ZWQtcHl0 aG9uCg== --===============1009593569926689103==--