linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-waitress_1.4.2.bb, branch scarthgap-nextMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap-next2020-04-13T05:57:22+00:00python3-waitress: upgrade 1.4.2 -> 1.4.32020-04-13T05:57:22+00:00Pierre-Jean Texierpjtexier@koncepto.io2020-04-12T15:03:31+00:00urn:sha1:6218b1b8dadffa20c079e98ae2166fe95b4870f2
This is a security release:
- In Waitress version 1.4.2 a new regular expression was added to validate the
headers that Waitress receives to make sure that it matches RFC7230.
Unfortunately the regular expression was written in a way that with invalid
input it leads to catastrophic backtracking which allows for a Denial of
Service and CPU usage going to a 100%.
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
python-waitress: consolidate inc and bb files into a single bb file2020-04-04T14:22:16+00:00Derek Strakaderek@asterius.io2020-04-04T13:28:37+00:00urn:sha1:e8ed47d627d87fa1398408707831e06986be3cb7
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
python-waitress: upgrade 1.4.1 -> 1.4.22020-01-17T23:44:06+00:00Zang Ruochenzangrc.fnst@cn.fujitsu.com2020-01-17T08:21:52+00:00urn:sha1:3c99f4875bf13711fbc105941bd890517c0bd42e
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>