python/python-Werkzeug
SHA256
15
0
Fork 0
forked from pool/python-Werkzeug
Code Pull Requests Activity

- Update to 3.0.6 (bsc#1232449, CVE-2024-49767):

Browse Source 
* Fix how max_form_memory_size is applied when parsing large
    non-file fields. GHSA-q34m-jh98-gwm2
  * safe_join catches certain paths on Windows that were not caught by
    ntpath.isabs on Python < 3.11. GHSA-f9vj-2wh5-fj8j
- 3.0.5:
  * The Watchdog reloader ignores file closed no write events. #2945
  * Logging works with client addresses containing an IPv6 scope.
    #2952
  * Ignore invalid authorization parameters. #2955
  * Improve type annotation fore SharedDataMiddleware. #2958
  * Compatibility with Python 3.13 when generating debugger pin and
    the current UID does not have an associated name. #2957

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Werkzeug?expand=0&rev=96
This commit is contained in:
Daniel Garcia
2024-10-28 13:13:37 +00:00
committed by Git OBS Bridge
parent f9fefcf079
commit 4ed63dd228
4 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
python-Werkzeug.changes
View File

@@ -1,3 +1,20 @@
-------------------------------------------------------------------
Mon Oct 28 12:57:32 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
- Update to 3.0.6 (bsc#1232449, CVE-2024-49767):
* Fix how max_form_memory_size is applied when parsing large
non-file fields. GHSA-q34m-jh98-gwm2
* safe_join catches certain paths on Windows that were not caught by
ntpath.isabs on Python < 3.11. GHSA-f9vj-2wh5-fj8j
- 3.0.5:
* The Watchdog reloader ignores file closed no write events. #2945
* Logging works with client addresses containing an IPv6 scope.
#2952
* Ignore invalid authorization parameters. #2955
* Improve type annotation fore SharedDataMiddleware. #2958
* Compatibility with Python 3.13 when generating debugger pin and
the current UID does not have an associated name. #2957
-------------------------------------------------------------------
Mon Aug 26 14:36:39 UTC 2024 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>