[Twisted-Python] Twisted 20.3.0rc1 Release Candidate Announcement
Glyph
glyph at twistedmatrix.com
Fri Mar 20 00:48:14 MDT 2020
Hi Richard!
Thanks for your testing!
One thing I always like to remind people is that if you want a particular ticket to get addressed quickly (in this case, the release) one thing you can do is to go to https://twisted.reviews/ <https://twisted.reviews/> and review a couple of project-member-submitted contributions; this drains the review queue and makes it more likely that project members with review privileges will review the thing you want reviewed, whenever they have spare cycles.
-glyph
> On Mar 18, 2020, at 4:42 AM, Richard van der Hoff <richard at matrix.org> wrote:
>
> Hi Amber and team!
>
> Firstly, I can confirm that I've been using 20.3.0rc1 on a production server, and all seems fine.
>
> So... I'm keen to see a final release, particularly in light of the request smuggling attacks. Any idea what sort of timeframe looks likely?
>
> R
>
> On 14/03/2020 07:03, Glyph wrote:
>> Thanks for doing another release, Amber! Glad to see more important HTTP security issues get squashed; looking forward to seeing this on store shelves soon!
>> -g
>>> On Mar 9, 2020, at 2:39 AM, Amber Brown (hawkowl) <hawkowl at atleastfornow.net> wrote:
>>>
>>> It's time for another Twisted release!
>>>
>>> Twisted 20.3.0rc1 brings the following:
>>>
>>> - curve25519-sha256 key exchange algorithm support in Conch.
>>> - "openssh-key-v1" key format support in Conch.
>>> - Security fixes to twisted.web, including preventing request smuggling attacks and rejecting malformed headers. CVE-2020-10108 and CVE-2020-10109 were assigned for these issues, see the NEWS file for full details.
>>> - `twist dns --secondary` now works on Python 3.
>>> - The deprecation of twisted.news.
>>> - ...and various other fixes, with 28 tickets closed in total.
>>>
>>> You can get the tarball and the NEWS file at https://twistedmatrix.com/Releases/rc/20.3.0rc1/ , or you can try it out from PyPI:
>>>
>>> python -m pip install Twisted==20.3.0rc1
>>>
>>> Please test it, and let me know how your applications fare, good or bad! If nothing comes up, 20.3 will release very soon.
>>>
>>> Twisted regards,
>>>
>>> Amber Brown (hawkowl)
>>>
>>> _______________________________________________
>>> Twisted-Python mailing list
>>> Twisted-Python at twistedmatrix.com
>>> https://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python
>> _______________________________________________
>> Twisted-Python mailing list
>> Twisted-Python at twistedmatrix.com
>> https://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python
>
> _______________________________________________
> Twisted-Python mailing list
> Twisted-Python at twistedmatrix.com
> https://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/twisted-python/attachments/20200319/a9797b4d/attachment.htm>
More information about the Twisted-Python
mailing list