Skip to content

[pcs-0.11] disable multipart requests in Tornado pt.2#1097

Merged
tomjelinek merged 2 commits intopcs-0.11from
pcs-0.11_disable-multipart-2
Apr 7, 2026
Merged

[pcs-0.11] disable multipart requests in Tornado pt.2#1097
tomjelinek merged 2 commits intopcs-0.11from
pcs-0.11_disable-multipart-2

Conversation

@CtrlZmaster
Copy link
Copy Markdown
Member

The previous patch (5aee28a) didn't work with older versions of Tornado. To maximize compatibility, multipart requests wil be turned off only if Tornado supports it.

I also removed the CVE links as they are included in the commit message and I'm also including them here for convenience:
https://www.cve.org/CVERecord?id=CVE-2026-31958
https://www.cve.org/CVERecord?id=CVE-2025-61771
https://www.cve.org/CVERecord?id=CVE-2025-61770

The previous patch (5aee28a) didn't
work with older versions of Tornado. To maximize compatibility,
multipart requests wil be turned off only if Tornado supports it.

I also removed the CVE links as they are included in the commit message
and I'm also including them here for convenience:
https://www.cve.org/CVERecord?id=CVE-2026-31958
https://www.cve.org/CVERecord?id=CVE-2025-61771
https://www.cve.org/CVERecord?id=CVE-2025-61770
@CtrlZmaster CtrlZmaster requested a review from tomjelinek as a code owner March 31, 2026 18:13
Comment thread pcs/daemon/run.py Outdated
@CtrlZmaster CtrlZmaster requested a review from tomjelinek April 2, 2026 15:51
@CtrlZmaster CtrlZmaster force-pushed the pcs-0.11_disable-multipart-2 branch from f478176 to de4bbe4 Compare April 2, 2026 16:26
@tomjelinek tomjelinek merged commit de4bbe4 into pcs-0.11 Apr 7, 2026
1 check passed
@tomjelinek tomjelinek deleted the pcs-0.11_disable-multipart-2 branch April 7, 2026 07:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants