On behalf of the Twisted contributors I announce the final release of
Twisted 22.2.0
This is a bugfix release.
The main bug is:
- CVE-2022-21716 twisted.conch.ssh.transport.SSHTransportBase now
disconnects the remote peer if the
SSH version string is not sent in the first 4096 bytes.
No new features were introduced in this release.
Release documentation is available at
https://docs.twistedmatrix.com
Wheels for the release candidate are available on PyPI
https://pypi.org/project/Twis
python -m pip install Twisted==22.2.0
Please use it and report any issues.
Many thanks to everyone who had a part in Twisted development,
the supporters of the Twisted Software Foundation,
the developers, and all the people testing and building great things
with Twisted!
Slava Ukraini!
Twisted Matrix Laboratories
Saturday, March 5, 2022
Twisted 22.2.0 Release
Wednesday, February 9, 2022
Twisted 22.1.0 Final Release Announcement
Hi
On behalf of the Twisted contributors I announce the final release of Twisted 22.1.0
This is mainly a bugfix release.
The main bug is:
- CVE-2022-21712 / GHSA-92x2-jw7w-xvvx twisted.web.client.RedirectAgent and twisted.web.client.BrowserLikeRedirectAgent now properly remove sensitive headers when redirecting to a different origin. (#10294)
The only new feature is:
- twisted.conch.ssh now supports SSH extension negotiation (RFC 8308). (#10266)
The release and NEWS file is available for review at
Release documentation is available at
Wheels for the release candidate are available on PyPI
python -m pip install Twisted==22.1.0
Please use it and report any issues.
Many thanks to everyone who had a part in Twisted development, the supporters of the Twisted Software Foundation, the developers, and all the people testing and building great things with Twisted!
— Adi Roiban
Thursday, July 29, 2021
Twisted 21.7.0 Released
On behalf of the Twisted contributors I announce the final release of Twisted 21.7.0
This is mostly a bugfix release.
Python 3.5 is no longer a supported platform.
The minimum supported platform is Python 3.6.7.
The notable features are:
- Python 3.10 beta is now a supported platform and should be ready for the final 3.10 release.
- twisted.web.template.renderElement() now accepts any IRequest implementer instead of only twisted.web.server.Request. Add type hints to twisted.web.template. (#10184)
- Type hinting was added to twisted.internet.defer, making this the first release of Twisted where you might reasonably be able to use mypy without your own custom stub files. (#10017)
The full release notes are available at
Documentation is available at
Wheels for the release candidate are available on PyPI
python -m pip install Twisted==21.7.0
Many thanks to everyone who had a part in Twisted - the supporters of the Twisted Software Foundation, the developers, and all the people testing and building great things with Twisted!
Enjoy the release
-Adi Roiban
Monday, March 23, 2020
Twisted Drops Python 2.7 Support
With the open-source Python community at large dropping Python 2.7 support in their projects, Twisted has decided to do the same. Twisted 20.3.0, the most recently released version, is the final release to offer Python 2.7 support.
Despite the break, the compatibility policy still applies. This means that if your code works with Twisted 20.3 on Python 2.7 and 3.5+, that updating your Twisted on Python 3 up to a theoretical 21.3 would not require changes that would make Python 2.7 + Twisted 20.3 stop working, despite a theoretical Twisted 21.3 not supporting 2.7. (This is, of course, in an ideal situation -- regressions and changes that are excepted from the policy such as security fixes do occur. Testing your applications on Twisted prereleases can help catch places where this happens, so, please do!)
- Amber (HawkOwl)
Despite the break, the compatibility policy still applies. This means that if your code works with Twisted 20.3 on Python 2.7 and 3.5+, that updating your Twisted on Python 3 up to a theoretical 21.3 would not require changes that would make Python 2.7 + Twisted 20.3 stop working, despite a theoretical Twisted 21.3 not supporting 2.7. (This is, of course, in an ideal situation -- regressions and changes that are excepted from the policy such as security fixes do occur. Testing your applications on Twisted prereleases can help catch places where this happens, so, please do!)
- Amber (HawkOwl)
Saturday, March 21, 2020
Twisted 20.3.0 Released
On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 20.3! The highlights of this release are:
You can find the downloads at <https://pypi.org/project/Twisted> (or alternatively <https://twistedmatrix.com/trac/wiki/Downloads>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-20.3.0/NEWS.rst>.
Many thanks to everyone who had a part in this release — the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted!
- hawkowl
curve25519-sha256
key exchange algorithm support in Conch.- "openssh-key-v1" key format support in Conch.
- Security fixes to twisted.web, including preventing request smuggling attacks and rejecting malformed headers. CVE-2020-10108 and CVE-2020-10109 were assigned for these issues, see the NEWS file for full details.
twist dns --secondary
now works on Python 3.- The deprecation of
twisted.news
. - ...and various other fixes, with 28 tickets closed in total.
You can find the downloads at <https://pypi.org/project/Twisted> (or alternatively <https://twistedmatrix.com/trac/wiki/Downloads>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-20.3.0/NEWS.rst>.
Many thanks to everyone who had a part in this release — the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted!
- hawkowl
Sunday, November 10, 2019
Twisted 19.10.0 Released
On behalf of Twisted Matrix Laboratories, I am honoured to announce the
release of Twisted 19.10! The highlights of this release are:
Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted!
- hawkowl
- Security fixes for HTTP/2 -- CVE-2019-9512 (Ping Flood), CVE-2019-9514 (Reset Flood), and CVE-2019-9515 (Settings Flood). Thanks to Jonathan Looney and Piotr Sikora.
- HTTP/2 fixes regarding timeouts.
- trial's assertResultOf, failureResultOf, and successResultOf, now accept Deferred-awaiting coroutines.
- Various other bug fixes for POP3, conch.ssh.keys, and twisted.web.client.FileBodyProducer.
Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted!
- hawkowl
Thursday, August 15, 2019
Twisted 19.7.0 Released
On behalf of Twisted Matrix Laboratories and our long-suffering release manager Amber Brown, I am honored to announce1 the release of Twisted 19.7.0!
The highlights of this release include:
- A full description on the PyPI page! Check it out here: https://pypi.org/project/Twisted/19.7.0/ (and compare to the slightly sad previous version, here: https://pypi.org/project/Twisted/19.2.1/)
- twisted.test.proto_helpers has been renamed to "twisted.internet.testing"
- This removes the gross special-case carve-out where it was the only "public" API in a test module, and now the rule is that all test modules are private once again.
- Conch's SSH server now supports hmac-sha2-512.
- The XMPP server in Twisted Words will now validate certificates!
- This is a very important security fix for any twisted.words / XMPP users. (See https://twistedmatrix.com/trac/ticket/9561)
- A nasty data-corruption bug in the IOCP reactor was fixed. If you're doing high-volume I/O on Windows you'll want to upgrade!
- Twisted Web no longer gives clients a traceback by default, both when you instantiate Site and when you use
twist web
on the command line. You can turn this behavior back on for local development withtwist web --display-tracebacks
. - Several bugfixes and documentation fixes resolving bytes/unicode type confusion in twisted.web.
- Python 3.4 is no longer supported.
pip install -U twisted[tls]
and enjoy all these enhancements today!
Thanks for using Twisted,
-glyph
1: somewhat belatedly: it came out 10 days ago. Oops!
Subscribe to:
Posts (Atom)