-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 31 Mar 2026 01:01:46 +0200 Source: python-tornado Architecture: source Version: 6.5.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Daniel Leidert <dleidert@debian.org> Closes: 1130507 Changes: python-tornado (6.5.5-1) unstable; urgency=medium . * Team upload. * New upstream release. - CVE-2026-31958: Introduces new limits on the size and complexity of multipart bodies, including a default limit of 100 parts per request to mitigate a possible DoS. It is also possible to disable parsing multipart/form-data entirely if not required (closes: #1130507). - The domain, path, and samesite arguments to RequestHandler.set_cookie are now validated for illegal characters, which could be abused to inject other attributes on the cookie. - Carriage return characters are no longer accepted in multipart/form-data headers. * d/python3-tornado.lintian-overrides: Fix matches. Checksums-Sha1: 736d4b23b4c8f93375e06b164a229bd578e1d290 2440 python-tornado_6.5.5-1.dsc 6493ae2e53910ec5da1acbea3066bb6d80114a38 546508 python-tornado_6.5.5.orig.tar.gz d5649eec324e1fe0e58d2edd75a92a5193f7a6ad 11760 python-tornado_6.5.5-1.debian.tar.xz 7ef81fd59fe0b107d1af21474cde6d303a24b373 10274 python-tornado_6.5.5-1_amd64.buildinfo Checksums-Sha256: ad4b99936a014cc86ce302999e7b02b63dc898422a08b7b0e157e0de70d19f2d 2440 python-tornado_6.5.5-1.dsc abd5473239228ea944b5b041d0531c26ac832d654db9044a44012a2e6f95fc61 546508 python-tornado_6.5.5.orig.tar.gz ca5dacec7d23b638025a6fde2368dc1c84e7800a544410241c60592320369abf 11760 python-tornado_6.5.5-1.debian.tar.xz 1670da034c1446bd0d09e199aa9ea23e97006ce2794b02a346d539715ec15115 10274 python-tornado_6.5.5-1_amd64.buildinfo Files: 397c4146b14b0d0ce00963984aac2073 2440 web optional python-tornado_6.5.5-1.dsc 52c218a54d8e8af02ae77082df7a2b13 546508 web optional python-tornado_6.5.5.orig.tar.gz ddb956420892860dff99af6d7c2e85d6 11760 web optional python-tornado_6.5.5-1.debian.tar.xz a5e20681cccdea93c906e3f1d9f62ad3 10274 web optional python-tornado_6.5.5-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmnLAdUACgkQS80FZ8KW 0F3PHBAAmHjeQTYH2KKsPZ+eFRuV6Jpmsg7f20HyFOhCtWtBYsGqLlT9R7NQYyGi +8lPx6+GB6ZdW5yF/rq43i1baXlH53wZpq0M75UNmhghMnz2WItUQRM2opr41Qs2 WAIH2wNPp5llFEH19sXwRIy7OEPweT2HHtm1wbNeELWMg4JTSOmMZjxSqRLE+zk0 PbivynoLuwZsWgnwBBA58RNV5Ulyt3EEl25nOxw4GFMElW1BLq+h+jMWYjdOOkia bhZAxsNYRn0uSGEYMUSUkNpZoE84CKDkOjz+yDL60bnFBFD0fX8F77ZrG56ycIXE PX1lCSt+fw0V6EOxTkRRVTCXyu8IrHsN0dakpF/hpYOeTaugy4YJyU7PfwzcrmTK y7V6CuzwyMkTLgluEyoFX/miWRuZflDiejt/Qp2waWvR6jKQ/WQPQ877jjvsHKO4 0YGIkw69jj1phjkZauZH4gZfkdcPyNbJos0eq5ro5IxqMJpxM7RcZgg+rfHiSxk1 YcboURjpxMVkQfH/B65SD4Xr/LAV/jyTMgRCNVYfPdTHtL3eqUYNjuySRVitiQYq IsQPeb8oIzFN8qMWkFyLUoQkdLGJC+ZPazAWQbGFhalXyq5yyeVRwEzrzBj+y6aM aXI319pM8bXBenOEXQHxoVOTqWmCSAspinrw1Nz251QpyQzdFjY= =fNaW -----END PGP SIGNATURE-----
