[ubuntu/oracular-security] python-werkzeug 3.0.3-1ubuntu0.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Tue Nov 5 17:12:57 UTC 2024


python-werkzeug (3.0.3-1ubuntu0.1) oracular-security; urgency=medium

  * SECURITY UPDATE: DoS via memory consumption
    - debian/patches/CVE-2024-49767.patch: apply max_form_memory_size
      another level up in the parser in src/werkzeug/formparser.py,
      src/werkzeug/sansio/multipart.py, tests/test_formparser.py.
    - CVE-2024-49767

Date: 2024-10-30 13:55:51.618951+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/python-werkzeug/3.0.3-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the oracular-changes mailing list