SUSE_ALP_Standard/patchinfo.20241128141924478384.90520734224241/_patchinfo

15 lines
711 B
Plaintext

<patchinfo incident="141">
<!-- generated from request(s) 354213 -->
<issue tracker="bnc" id="1233668">VUL-0: CVE-2024-52804: python-tornado,python-tornado6: algorithm used for parsing HTTP cookies can have quadratic complexity and lead to excessive CPU consumption</issue>
<issue tracker="cve" id="2024-52804"/>
<packager>StevenK</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for python-tornado6</summary>
<description>This update for python-tornado6 fixes the following issues:
- CVE-2024-52804: Avoid quadratic performance of cookie parsing (bsc#1233668).
</description>
<package>python-tornado6</package>
<seperate_build_arch/>
</patchinfo>