Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | python3-waitress: Upgrade 1.4.3 -> 1.4.4 | Leon Anavi | 2020-06-10 | 1 | -12/+0 |
| | | | | | | | | Upgrade to release 1.4.4. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> | ||||
* | python3-waitress: upgrade 1.4.2 -> 1.4.3 | Pierre-Jean Texier | 2020-04-12 | 1 | -0/+12 |
This is a security release: - In Waitress version 1.4.2 a new regular expression was added to validate the headers that Waitress receives to make sure that it matches RFC7230. Unfortunately the regular expression was written in a way that with invalid input it leads to catastrophic backtracking which allows for a Denial of Service and CPU usage going to a 100%. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> |