3.0.1 (2024-10-28)
Backward Incompatibilities
- Python 3.8 is no longer supported.
See #445.
Features
- Added support for Python 3.13.
See #445.
Security
-
Fix a bug that would lead to Waitress busy looping on select() on a half-open
socket due to a race condition that existed when creating a new HTTPChannel.
See #435,
#418 and
GHSA-3f84-rpwh-47g6With thanks to Dylan Jay and Dieter Maurer for their extensive debugging and
helping track this down. -
No longer strip the header values before passing them to the WSGI environ.
See #434 and
#432 -
Fix a race condition in Waitress when
channel_request_lookahead
is enabled
that could lead to HTTP request smuggling.