linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-tornado_6.4.1.bb, branch whinlatter

python3-tornado: Upgrade 6.4.1 -> 6.4.2

2024-11-25T16:25:02+00:00

Upgrade to release 6.4.2 which brings security improvements: Parsing of the cookie header is now much more efficient. The older algorithm sometimes had quadratic performance which allowed for a denial-of-service attack in which the server would spend excessive CPU time parsing cookies and block the event loop. This change fixes CVE-2024-7592. Signed-off-by: Leon Anavi Signed-off-by: Khem Raj

python3-tornado: Switch to python_setuptools_build_meta

2024-06-22T04:45:10+00:00

Support has been there for few years now [1] [1] https://github.com/tornadoweb/tornado/commit/e71fb6e616e08838df55dddb494c96a80454f812 Signed-off-by: Khem Raj

python3-tornado: Upgrade 6.4 -> 6.4.1

2024-06-21T02:25:52+00:00

Upgrade to version 6.4.1: - Parsing of the Transfer-Encoding header is now stricter. - Handling of whitespace in headers now matches the RFC more closely. Only space and tab characters are treated as whitespace and stripped from the beginning and end of header values. - tornado.curl_httpclient now prohibits carriage return and linefeed headers in HTTP headers. Signed-off-by: Leon Anavi Signed-off-by: Khem Raj