From: Ben Darnell <ben@bendarnell.com>
Date: Fri, 11 Aug 2023 02:38:19 +0000 (-0400)
Subject: Set version to 6.3.3
X-Git-Tag: v6.3.3^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5c8a9a4fa792f8b18bd26bc7a8335e3bbe837852;p=thirdparty%2Ftornado.git

Set version to 6.3.3
---

diff --git a/docs/releases.rst b/docs/releases.rst
index fc7e41654..076ac8633 100644
--- a/docs/releases.rst
+++ b/docs/releases.rst
@@ -4,6 +4,7 @@ Release notes
 .. toctree::
    :maxdepth: 2
 
+   releases/v6.3.3
    releases/v6.3.2
    releases/v6.3.1
    releases/v6.3.0
diff --git a/docs/releases/v6.3.3.rst b/docs/releases/v6.3.3.rst
new file mode 100644
index 000000000..7fe0110fd
--- /dev/null
+++ b/docs/releases/v6.3.3.rst
@@ -0,0 +1,12 @@
+What's new in Tornado 6.3.3
+===========================
+
+Aug 11, 2023
+------------
+
+Security improvements
+~~~~~~~~~~~~~~~~~~~~~
+
+- The ``Content-Length`` header and ``chunked`` ``Transfer-Encoding`` sizes are now parsed
+  more strictly (according to the relevant RFCs) to avoid potential request-smuggling
+  vulnerabilities when deployed behind certain proxies.
diff --git a/tornado/__init__.py b/tornado/__init__.py
index 475c1f612..c2a8f25b4 100644
--- a/tornado/__init__.py
+++ b/tornado/__init__.py
@@ -22,8 +22,8 @@
 # is zero for an official release, positive for a development branch,
 # or negative for a release candidate or beta (after the base version
 # number has been incremented)
-version = "6.3.2"
-version_info = (6, 3, 2, 0)
+version = "6.3.3"
+version_info = (6, 3, 3, 0)
 
 import importlib
 import typing