-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Dec 2024 16:44:56 +0800 Source: python-werkzeug Architecture: source Version: 2.2.2-3+deb12u1 Distribution: bookworm Urgency: high Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Sean Whitton <spwhitton@spwhitton.name> Closes: 1054553 1070711 1086062 Changes: python-werkzeug (2.2.2-3+deb12u1) bookworm; urgency=high . * Backport upstream fix for CVE-2023-46136 (denial of service when file upload begins with CR or LF) (Closes: #1054553). * Backport upstream fixes for CVE-2024-34069 (arbitrary code execution on developer's machine via the debugger) (Closes: #1070711). * Backport upstream fix for CVE-2024-49767 (denial of service when processing multipart/form-data requests) (Closes: #1086062). Checksums-Sha1: 564bdc41c16af520e84fea8a64e4b396ace11943 2760 python-werkzeug_2.2.2-3+deb12u1.dsc 4807723cdea3666c001068bbcbf70d5f6c3a5f2a 16648 python-werkzeug_2.2.2-3+deb12u1.debian.tar.xz Checksums-Sha256: dc96b1bd611993c7e9b5deebea43e676e96f5c35b9e9f4fd5eea5a96b3afdd0f 2760 python-werkzeug_2.2.2-3+deb12u1.dsc 7c2f39f24182e433fea2ecee1e60839485614628af236ee92d4e7f3f0f1e25c0 16648 python-werkzeug_2.2.2-3+deb12u1.debian.tar.xz Files: 6f642302401d59600ad541fd7c3c0e1d 2760 python optional python-werkzeug_2.2.2-3+deb12u1.dsc 19f7708a39698a1ea1072e457528e734 16648 python optional python-werkzeug_2.2.2-3+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmdUC5gACgkQaVt65L8G YkBVsw/9Hh+r4VbvRb+ojwMDuAJ4vH0p6KHygIwr5GepUlBLp4g3+rAb2K9BL6+z /pvIScUczrbfL6DrDLi+/6WJu9TKlZMbPt2d/NEWLE6XHJrdisacXIRxttcNLELE i9yWE73UsMPNrpeemexaQQdZgSGIiP8axECNrI2OfldSyAAH+VwYGr0Tme3VClmF bJgKO9+4eV2p0CWzWVZjyEBU3PCuNamgYYY6PUE68y4HAd0mxVyKOY+DHEZH8xKc iJI7NMcCzkhsLDULDT86IqCxXu5wl94q4GbVR/kpTLP8LFppIB1HKTg5K2HMgWVo BwGOvM4NUmLS5hnIFlTDh7NQD7ZH5nDKWjE6etH8UjGs1YPJPXu4RKWZ0XI/wDMu 5Fgv3si9Q0e6IPYi5FoBy6iHSxxZMPNg7qiQuLdnzEHQovPYIoe8z6xaLejk5KAX LXQVB0RToZnhadDRAtfEgLUEr2s5kFND/wTFyOJf3BlhlIJu2UvFsD+ACmyQZ91k EwqOc13q7bbFT8K8m6PfZN2GCHBxw6Ys/oIqoLvNbwQF7dtCF5SWEwpXkZS03+Ff cUWnseXfS7dnVU3WSo+4Umzx+gn4yM3QBlIMDSffiV1VyMS8FAzyXDqGeR7Hadwd Psvxtv4qfOmVO6k0HechAsXnMS7S2+8VEkrry1CTtzYNVVqi7AQ= =7GNi -----END PGP SIGNATURE-----
