Summary
[6.4.2-2.2]
- tests: add ci_test.fmf + update gating.yaml
Related: RHEL-91999
[6.4.2-2.1]
- httputil: Raise errors instead of logging in multipart/form-data parsing
Resolves: RHEL-91999
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3-tornado | 0:6.4.2-2.el9_6.2 |
Vulnerabilities 1
-
High 7.5
Tornado vulnerable to excessive logging caused by malformed multipart form data
Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate…