diff mbox series

[meta-python,4/5] python3-tornado: Upgrade 6.4.1 -> 6.4.2

Message ID 20241125133204.31594-4-leon.anavi@konsulko.com
State New
Headers show
Series [meta-python,1/5] python3-typeguard: Upgrade 4.3.0 -> 4.4.1 | expand

Commit Message

Leon Anavi Nov. 25, 2024, 1:32 p.m. UTC 
Upgrade to release 6.4.2 which brings security improvements:

Parsing of the cookie header is now much more efficient. The older
algorithm sometimes had quadratic performance which allowed for a
denial-of-service attack in which the server would spend
excessive CPU time parsing cookies and block the event loop.
This change fixes CVE-2024-7592.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 .../{python3-tornado_6.4.1.bb => python3-tornado_6.4.2.bb}      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-tornado_6.4.1.bb => python3-tornado_6.4.2.bb} (93%)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-tornado_6.4.1.bb b/meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb
similarity index 93%
rename from meta-python/recipes-devtools/python/python3-tornado_6.4.1.bb
rename to meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb
index b8f6752f28..751f32913a 100644
--- a/meta-python/recipes-devtools/python/python3-tornado_6.4.1.bb
+++ b/meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb
@@ -6,7 +6,7 @@  HOMEPAGE = "http://www.tornadoweb.org/en/stable/"
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
-SRC_URI[sha256sum] = "92d3ab53183d8c50f8204a51e6f91d18a15d5ef261e84d452800d4ff6fc504e9"
+SRC_URI[sha256sum] = "92bad5b4746e9879fd7bf1eb21dce4e3fc5128d71601f80005afa39237ad620b"
 
 inherit pypi python_setuptools_build_meta