CVS commit: pkgsrc/www/py-tornado

"Adam Ciarcinski" <[email protected]> Fri, 7 Aug 2026 08:28:01 +0000

Newsgroups	gmane.os.netbsd.devel.pkgsrc.cvs
Message-ID	<[email protected]>

Module Name:	pkgsrc
Committed By:	adam
Date:		Fri Aug  7 08:28:01 UTC 2026

Modified Files:
	pkgsrc/www/py-tornado: Makefile distinfo

Log Message:
py-tornado: updated to 6.5.8

Tornado 6.5.8

Security fixes

- Form-encoded ``POST`` bodies are now subject to a limit of 1000 arguments by default. This
  prevents a CPU and memory denial of service attack. This limit can be overridden via the
  `.set_parse_body_config` function. Thanks to `Arpit Jain <https://github.com/arpitjain099>`_
  for reporting this issue.
- Multipart parsing now rejects requests with an excessive number of parts earlier in the parsing
  process, limiting memory consumption. Thanks to `afldl <https://github.com/afldl>`_ for
  reporting this issue.
- The deprecated mixed-case arguments to `.RequestHandler.set_cookie` now enforce the same
  restrictions on invalid characters that were introduced in Tornado 6.5.5 for the standard
  lowercase arguments. Thanks to `sec-reex <https://github.com/sec-reex>`_ and
  `Arpit Jain <https://github.com/arpitjain099>`_ for reporting this issue.

Deprecations

- The `.OpenIdMixin` class is deprecated and will be removed in Tornado 6.7. OpenID 2.0 is no
  longer widely supported by identity providers.


To generate a diff of this commit:
cvs rdiff -u -r1.49 -r1.50 pkgsrc/www/py-tornado/Makefile
cvs rdiff -u -r1.37 -r1.38 pkgsrc/www/py-tornado/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

(unnamed) (text/x-diff, 1.5 KB)

Modified files:

Index: pkgsrc/www/py-tornado/Makefile
diff -u pkgsrc/www/py-tornado/Makefile:1.49 pkgsrc/www/py-tornado/Makefile:1.50
--- pkgsrc/www/py-tornado/Makefile:1.49	Tue Jun  9 14:58:14 2026
+++ pkgsrc/www/py-tornado/Makefile	Fri Aug  7 08:28:01 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.49 2026/06/09 14:58:14 adam Exp $
+# $NetBSD: Makefile,v 1.50 2026/08/07 08:28:01 adam Exp $
 
-DISTNAME=	tornado-6.5.7
+DISTNAME=	tornado-6.5.8
 PKGNAME=	${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=	www python
 MASTER_SITES=	${MASTER_SITE_PYPI:=t/tornado/}

Index: pkgsrc/www/py-tornado/distinfo
diff -u pkgsrc/www/py-tornado/distinfo:1.37 pkgsrc/www/py-tornado/distinfo:1.38
--- pkgsrc/www/py-tornado/distinfo:1.37	Tue Jun  9 14:58:14 2026
+++ pkgsrc/www/py-tornado/distinfo	Fri Aug  7 08:28:01 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.37 2026/06/09 14:58:14 adam Exp $
+$NetBSD: distinfo,v 1.38 2026/08/07 08:28:01 adam Exp $
 
-BLAKE2s (tornado-6.5.7.tar.gz) = 424560d8cd049d175a2b019e191f05481b2ba36fc4dca3e21e84ba17a9f258ae
-SHA512 (tornado-6.5.7.tar.gz) = bd9790da5dc84580710cc74cda0f8f691ff0af845e9e4b47c431333aae5107d808f8a3a82155d4cddefb86f4c516f3a2bef15edcb19d743b936d20d101db7cf1
-Size (tornado-6.5.7.tar.gz) = 519252 bytes
+BLAKE2s (tornado-6.5.8.tar.gz) = 9c09a9e07f2a8269cb8cded525642be74b1797eeac875bd9a51447c3abbfb100
+SHA512 (tornado-6.5.8.tar.gz) = 88c096ca30357644c07b6013cd514b5e64135b26a77d9ff17640951632d6f68c9a68d7fa80224743f7900fbf5ddde838088bd9838395651d87d876c8d1d1a2fe
+Size (tornado-6.5.8.tar.gz) = 520493 bytes