Stay Secure with the Latest Linux Advisories

security advisoryhigh severitybuffer overflow

Fedora 37 Advisory: Security Issues in mingw-python-werkzeug 2.2.3

Update to python-werkzeug-2.2.3.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-af75e27098 2023-03-16 18:30:53.695974 --------------------------------------------------------------------------------Name : mingw-python-werkzeug Product : Fedora 37 Version : 2.2.3 Release : 1.fc37 URL : https://palletsprojects.com/projects/werkzeug/ Summary : MinGW Windows Python Werkzeug library Description : MinGW Windows Python werkzeug library. --------------------------------------------------------------------------------Update Information: Update to python-werkzeug-2.2.3. --------------------------------------------------------------------------------ChangeLog: * Sat Mar 4 2023 Sandro Mani - 2.2.3-1 - Update to 2.2.3 * Thu Jan 19 2023 Fedora Release Engineering - 2.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #2170258 - CVE-2023-23934 mingw-python-werkzeug: python-werkzeug: cookie prefixed with = can shadow unprefixed cookie [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2170258 [ 2 ] Bug #2170261 - CVE-2023-25577 mingw-python-werkzeug: python-werkzeug: high resource usage when parsing multipart form data with many fields [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2170261 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-af75e27098' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . A new release of mingw-python-werkzeug is now available, resolving significant problems within Fedora 37's python framework.. Fedora Update,Mingw-Python,Werkzeug Security,Security Issues. . Severity: Critical. LinuxSecurity.com Team

Mar 16, 2023 •Critical Fedora