[ubuntu/noble-security] python-werkzeug 3.0.1-3ubuntu0.2 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Tue Nov 5 17:12:59 UTC 2024
python-werkzeug (3.0.1-3ubuntu0.2) noble-security; urgency=medium
* SECURITY UPDATE: DoS via memory consumption
- debian/patches/CVE-2024-49767.patch: apply max_form_memory_size
another level up in the parser in src/werkzeug/formparser.py,
src/werkzeug/sansio/multipart.py, tests/test_formparser.py.
- CVE-2024-49767
Date: 2024-10-30 13:55:56.572816+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/python-werkzeug/3.0.1-3ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list