ALT-PU-2025-3304: package python3-module-werkzeug update to version 2.3.8-alt1
Описание
This update upgrades python3-module-werkzeug to version 2.3.8-alt1.
Устраненные уязвимости12
Ссылки6
GHSA-2g68-c3qc-8985
https://github.com/advisories/GHSA-2g68-c3qc-8985GHSA-f9vj-2wh5-fj8j
https://github.com/advisories/GHSA-f9vj-2wh5-fj8jGHSA-hrfv-mqp8-q5rw
https://github.com/advisories/GHSA-hrfv-mqp8-q5rwGHSA-px8h-6qxv-m22q
https://github.com/advisories/GHSA-px8h-6qxv-m22qGHSA-xg9f-g7g7-2323
https://github.com/advisories/GHSA-xg9f-g7g7-2323Связанные уязвимости
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below ...
ALT-PU-2023-7835: package `python3-module-werkzeug` update to version 3.0.1-alt1