Re: Twisted 19.10.0rc1 Release Candidate Announcement
"Amber Brown (hawkowl)" <[email protected]> Tue, 15 Oct 2019 08:30:04 +0100
| Newsgroups | gmane.comp.python.twisted |
|---|---|
| Message-ID | <[email protected]> |
--===============0876010010353024631== Content-Type: multipart/alternative; boundary="------------E61E368512259A18BD281CC0" Content-Language: en-US This is a multi-part message in MIME format. --------------E61E368512259A18BD281CC0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit On 14/10/19 10:07 pm, Glyph wrote: > > >> On Oct 14, 2019, at 1:05 AM, Amber Brown (hawkowl) >> <[email protected] <mailto:[email protected]>> wrote: >> >> Hello everyone, it's time for more Twisted! > > //I/t's *always* time for more Twisted/ > >> It contains: >> >> - Security fixes for HTTP/2 -- CVE-2019-9512 (Ping Flood), CVE-2019-9514 >> (Reset Flood), and CVE-2019-9515 (Settings Flood). Thanks to Jonathan >> Looney and Piotr Sikora. >> - HTTP/2 fixes regarding timeouts. > > My understanding is that these are pretty much all resource-exhaustion > attacks? I believe so. > Thanks for keeping the release train moving, Amber! > > Do we have any progress on a volunteer who will shadow this one / the > next one? > This release is something I've snuck in work time. ;) I have thought on it a bit, and I'm planning on eliminating some (IMO needless) steps to make such an onboarding more viable, before I start that. I have also not had free time to organise getting someone to shadow it, which is irony :P But, now I'm not on the Keynote Trail, I'm hoping there's time for this. > Twisted prevails, > > -g > yay twisted, - hawkie --------------E61E368512259A18BD281CC0 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> </head> <body> <p><br> </p> <div class="moz-cite-prefix">On 14/10/19 10:07 pm, Glyph wrote:<br> </div> <blockquote type="cite" cite="mid:[email protected]"> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> <br class=""> <div><br> <blockquote type="cite" class=""> <div class="">On Oct 14, 2019, at 1:05 AM, Amber Brown (hawkowl) <<a href="mailto:[email protected]" class="" moz-do-not-send="true">[email protected]</a>> wrote:</div> <br class="Apple-interchange-newline"> <div class=""> <div class="">Hello everyone, it's time for more Twisted!<br class=""> </div> </div> </blockquote> <div><br class=""> </div> <div><i class=""><i class="">I</i>t's <b class="">always</b> time for more Twisted</i></div> <br class=""> <blockquote type="cite" class=""> <div class=""> <div class="">It contains:<br class=""> <br class=""> - Security fixes for HTTP/2 -- CVE-2019-9512 (Ping Flood), CVE-2019-9514<br class=""> (Reset Flood), and CVE-2019-9515 (Settings Flood). Thanks to Jonathan<br class=""> Looney and Piotr Sikora.<br class=""> - HTTP/2 fixes regarding timeouts.<br class=""> </div> </div> </blockquote> <div><br class=""> </div> <div>My understanding is that these are pretty much all resource-exhaustion attacks?</div> </div> </blockquote> <p><br> </p> <p>I believe so.<br> </p> <br> <blockquote type="cite" cite="mid:[email protected]"> <div>Thanks for keeping the release train moving, Amber!</div> <div><br class=""> </div> <div>Do we have any progress on a volunteer who will shadow this one / the next one?</div> <div><br class=""> </div> </blockquote> <p><br> </p> <p>This release is something I've snuck in work time. ;)</p> <p>I have thought on it a bit, and I'm planning on eliminating some (IMO needless) steps to make such an onboarding more viable, before I start that. I have also not had free time to organise getting someone to shadow it, which is irony :P</p> <p>But, now I'm not on the Keynote Trail, I'm hoping there's time for this.<br> </p> <p><br> </p> <blockquote type="cite" cite="mid:[email protected]"> <div>Twisted prevails,</div> <div><br class=""> </div> <div>-g</div> <div><br class=""> </div> </blockquote> <p>yay twisted,</p> <p>- hawkie<br> </p> <p><br> </p> </body> </html> --------------E61E368512259A18BD281CC0-- --===============0876010010353024631== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KVHdpc3RlZC1Q eXRob24gbWFpbGluZyBsaXN0ClR3aXN0ZWQtUHl0aG9uQHR3aXN0ZWRtYXRyaXguY29tCmh0dHBz Oi8vdHdpc3RlZG1hdHJpeC5jb20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3R3aXN0ZWQtcHl0 aG9uCg== --===============0876010010353024631==--