[ubuntu/noble-updates] python-werkzeug 3.0.1-3ubuntu0.2 (Accepted)

[Ubuntu Archive Robot]

python-werkzeug (3.0.1-3ubuntu0.2) noble-security; urgency=medium

  * SECURITY UPDATE: DoS via memory consumption
    - debian/patches/CVE-2024-49767.patch: apply max_form_memory_size
      another level up in the parser in src/werkzeug/formparser.py,
      src/werkzeug/sansio/multipart.py, tests/test_formparser.py.
    - CVE-2024-49767

Date: 2024-10-30 13:55:56.572816+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-werkzeug/3.0.1-3ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.