[ubuntu/jammy-updates] python-werkzeug 2.0.2+dfsg1-1ubuntu0.22.04.3 (Accepted)

[Ubuntu Archive Robot]

python-werkzeug (2.0.2+dfsg1-1ubuntu0.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via memory consumption
    - debian/patches/CVE-2024-49767.patch: apply max_form_memory_size
      another level up in the parser in src/werkzeug/formparser.py,
      src/werkzeug/sansio/multipart.py, tests/test_formparser.py.
    - CVE-2024-49767

Date: 2024-10-30 13:57:50.563071+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-werkzeug/2.0.2+dfsg1-1ubuntu0.22.04.3
-------------- next part --------------
Sorry, changesfile not available.