github Pylons/waitress v3.0.1

latest release: v3.0.2
9 hours ago

3.0.1 (2024-10-28)

Backward Incompatibilities

  • Python 3.8 is no longer supported.
    See #445.

Features

  • Added support for Python 3.13.
    See #445.

Security

  • Fix a bug that would lead to Waitress busy looping on select() on a half-open
    socket due to a race condition that existed when creating a new HTTPChannel.
    See #435,
    #418 and
    GHSA-3f84-rpwh-47g6

    With thanks to Dylan Jay and Dieter Maurer for their extensive debugging and
    helping track this down.

  • No longer strip the header values before passing them to the WSGI environ.
    See #434 and
    #432

  • Fix a race condition in Waitress when channel_request_lookahead is enabled
    that could lead to HTTP request smuggling.

    See GHSA-9298-4cf8-g4wj

Don't miss a new waitress release

NewReleases is sending notifications on new releases.