Описание
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues:
- CVE-2019-14806: Fixed insufficient debugger PIN randomness when running the development server in Docker containers (bsc#1145383).
Список пакетов
SUSE Linux Enterprise Module for Public Cloud 12
python-Werkzeug-0.12.2-10.10.1
python3-Werkzeug-0.12.2-10.10.1
Ссылки
- Link for SUSE-SU-2022:3977-1
- E-Mail link for SUSE-SU-2022:3977-1
- SUSE Security Ratings
- SUSE Bug 1145383
- SUSE CVE CVE-2019-14806 page
Описание
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 12:python-Werkzeug-0.12.2-10.10.1
SUSE Linux Enterprise Module for Public Cloud 12:python3-Werkzeug-0.12.2-10.10.1
Ссылки
- CVE-2019-14806
- SUSE Bug 1145383