Announcing Tornado 6.4.2

[Ben Darnell]

I am pleased to announce the release of Tornado 6.4.2. This is a security release that fixes a denial of service vulnerability in HTTP cookie parsing (CVE-2024-52804).

Security advisory: https://github.com/tornadoweb/tornado/security/advisories/GHSA-8w49-h785-mj3c

Release notes: https://www.tornadoweb.org/en/stable/releases/v6.4.2.html

-Ben

[Rajdeep Rath]

Thanks Mr Ben 👍

--
You received this message because you are subscribed to the Google Groups "Tornado Web Server" group.
To unsubscribe from this group and stop receiving emails from it, send an email to python-tornad...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/python-tornado/CAFkYKJ7qZjkBBokQoDf%2B4q2sGmDsSaenyNQaA4zHXwvAiaW%3Daw%40mail.gmail.com.