-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2024-1682369c61 2024-06-28 00:32:24.890257 --------------------------------------------------------------------------------
Name : python-waitress Product : Fedora EPEL 7 Version : 1.4.3 Release : 2.el7 URL : https://github.com/Pylons/waitress Summary : Waitress WSGI server Description : Waitress is meant to be a production-quality pure-Python WSGI server with very acceptable performance. It has no dependencies except ones which live in the Python standard library. It runs on CPython on Unix and Windows under Python 2.6+ and Python 3.3+. It is also known to run on PyPy 1.6.0+ on UNIX. It supports HTTP/1.0 and HTTP/1.1.
-------------------------------------------------------------------------------- Update Information:
Backport upstream fix for CVE-2022-24761. https://github.com/advisories/GHSA-4f7p-27jc-3c36 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 26 2024 Carl George carlwgeorge@fedoraproject.org - 1.4.3-2 - Backport upstream fix for CVE-2022-24761 rhbz#2065791 - Run test suite -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2065791 - CVE-2022-24761 python-waitress: waitress: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2065791 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update python-waitress' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------