Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Debian: DSA-5471-2 Important: Python-Django Security Flaw Notification

debian
Calendar Grey August 6, 2023
Debian Logo
Update the python-werkzeug package on Debian to mitigate several security vulnerabilities, including potential denial of service and vulnerabilities in cookie parsing mechanisms.
Several vulnerabilities were discovered in python-werkzeug, a collection of utilities for WSGI applications
Topics%20covered

Topics Covered

security advisory security issue Debian Denial Of Service python-werkzeug cookie parsing

Summary

CVE-2023-23934

It was discovered that Werkzeug did not properly handle the parsing
of nameless cookies which may allow shadowing of other cookies.

CVE-2023-25577

It was discovered that Werkzeug could parse unlimited number of
parts, including file parts, which may result in denial of service.

For the oldstable distribution (bullseye), these problems have been fixed
in version 1.0.1+dfsg1-2+deb11u1.

We recommend that you upgrade your python-werkzeug packages.

For the detailed security status of python-werkzeug please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/source-package/python-werkzeug

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: python-werkzeug
CVE ID: CVE-2023-23934 CVE-2023-25577

Topics%20covered

Topics Covered

security advisory security issue Debian Denial Of Service python-werkzeug cookie parsing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here