U radu paketa python-tornado otkriven je i ispravljen sigurnosni propust koji napadaču omogućuje umetanje proizvoljnih podataka i XSS napad.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8217
2012-05-22 01:50:41
--------------------------------------------------------------------------------

Name        : python-tornado
Product     : Fedora 16
Version     : 2.2.1
Release     : 1.fc16
URL         : http://www.tornadoweb.org
Summary     : Scalable, non-blocking web server and tools
Description :
Tornado is an open source version of the scalable, non-blocking web
server and tools.

The framework is distinct from most mainstream web server frameworks
(and certainly most Python frameworks) because it is non-blocking and
reasonably fast. Because it is non-blocking and uses epoll, it can
handle thousands of simultaneous standing connections, which means it is
ideal for real-time web services.

--------------------------------------------------------------------------------
Update Information:

Update to 2.2.1 which fixes an HTTP header injection vulnerability.
--------------------------------------------------------------------------------
ChangeLog:

* Sun May 20 2012 Thomas Spura <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 2.2.1-1
- update to upstream release 2.2.1 (fixes CVE-2012-2374)
- fix typo for epel6 macro bug #822972 (Florian La Roche)
* Thu Feb  9 2012 IonuÄ