-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 18 Feb 2025 13:27:02 +0000 Source: python-werkzeug Architecture: source Version: 1.0.1+dfsg1-2+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Python Modules Packaging Team <python-modules-team@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1070711 Changes: python-werkzeug (1.0.1+dfsg1-2+deb11u2) bullseye-security; urgency=high . * Non-maintainer by the Debian LTS team. * CVE-2024-34069: Prevent an issue where the debugger could have allowed an attacker to execute code on a developer's machine. This attack required the attacker to manipulate the developer into interacting with a domain and subdomain that they control and enter the debugger PIN. But if they were successful, it would have allowed access to the debugger even if it is only running on localhost. (Closes: #1070711). * Add a debian/salsa-ci.yml. Checksums-Sha1: 6bbe57581a553300bbffa5b7f3284c5d05072a83 2477 python-werkzeug_1.0.1+dfsg1-2+deb11u2.dsc 4b5aa9ff48e780268966cbfca8cafd82586ba8a9 730032 python-werkzeug_1.0.1+dfsg1.orig.tar.xz 1d3850007628a6f676082e7133a981c231b27382 13304 python-werkzeug_1.0.1+dfsg1-2+deb11u2.debian.tar.xz e9aab04e2f1ff126c81a4043cb6145070ebced1c 9292 python-werkzeug_1.0.1+dfsg1-2+deb11u2_amd64.buildinfo Checksums-Sha256: 9b3118ee9f4a4701b0c3f4f7c026fcd2f0a2021b17ac97b4a18b48ee35e25886 2477 python-werkzeug_1.0.1+dfsg1-2+deb11u2.dsc 12432f3bd8abf78aa8d8f144d3088acdf6612c6984ad8ae812b34c2391f9bffa 730032 python-werkzeug_1.0.1+dfsg1.orig.tar.xz 1394414af39bde052c813f250dfd03da932dfbd4495820221c9dea59027b63de 13304 python-werkzeug_1.0.1+dfsg1-2+deb11u2.debian.tar.xz cfd1c4c8acb4f565b33b8013935321c01bb3d274af1ed1aaed88f78a93faae57 9292 python-werkzeug_1.0.1+dfsg1-2+deb11u2_amd64.buildinfo Files: 2245752a9442b165c6a8397ba247878a 2477 python optional python-werkzeug_1.0.1+dfsg1-2+deb11u2.dsc e8c571418ddb9a5dddf85e74a7098121 730032 python optional python-werkzeug_1.0.1+dfsg1.orig.tar.xz c6389cf4c95c5e686c2141279058addb 13304 python optional python-werkzeug_1.0.1+dfsg1-2+deb11u2.debian.tar.xz 643ef274f8285b79bb1584a76e037299 9292 python optional python-werkzeug_1.0.1+dfsg1-2+deb11u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAme4hWcACgkQHpU+J9Qx HlhUfQ/9FWhNUen7pLB3RgvJ+4/7MTasuodv6pppxN6zgnkw8A8lqvod0ZiZmKz2 5V+v1OYIUwPsG/3zXNCfulaVfzp2DfwOEvrAwgalJuCe9oB0ZgkB7c/PIwS3ADn/ DISbg18Rv0XtTv3I/CSSRIBbqDH7P8QZ/pzjAkEK+UpZJcwxADcAXo5EFI+hyrqV sHRK3y1r7KSaTh6aB6w+WDoK45Zy6XUEMYYoUnhBhICifq6EyV71kA+bt8znlz9H aWhR4XJkJUIANxXJR36h7iYwP5JoKUHtubpX5nx9cyfhCcRoBAo3HR6l+BwU4kOg rlM53JVNLdJQ23O5IkXQBZxT0c0Gs1z7dQ4JlRZssHEE/+fKg3UPxqM4a/WJMdF5 WCJh72l4VCLZUgvnpsmDwWx+oUBEZ7wiplg4HF7il3pFGqOF4iBtDwGCTRHHUXnT uZf9x5+YnsYKv7ztnaykP+Zhyv/MM1SN4RcMq7qrG8PxriDn5kSLf/15Cz/eI2aj 7OVDp/fm/cpKb0THfkM6QQaqOGURUZB7bOZcBOlbH47BrKQx5oty1JMLmqBDE8WE pb//tSacgpvWBOkgb43H5v3KRGo0LkWwuH1do13ILgohckYYNr6Uc13I/Z+zFyhk rOVk1YheHDfn5+m0VKOicdag0r0EM2LwrioK/lDfagsVjK6hv58= =1R43 -----END PGP SIGNATURE-----
