Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use https:// in HOMEPAGE variable instead of http:// | Jason Schonberg | 2025-03-25 | 1 | -1/+1 |
| | | | | | Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> | ||||
* | python3-tornado: Upgrade 6.4.1 -> 6.4.2 | Leon Anavi | 2024-11-25 | 1 | -0/+41 |
Upgrade to release 6.4.2 which brings security improvements: Parsing of the cookie header is now much more efficient. The older algorithm sometimes had quadratic performance which allowed for a denial-of-service attack in which the server would spend excessive CPU time parsing cookies and block the event loop. This change fixes CVE-2024-7592. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> |