Skip to content

python311Packages.werkzeug: 2.3.7 -> 2.3.8#267109

Merged
risicle merged 1 commit intoNixOS:stagingfrom
mweinelt:werkzeug-2.3.8
Dec 1, 2023
Merged

python311Packages.werkzeug: 2.3.7 -> 2.3.8#267109
risicle merged 1 commit intoNixOS:stagingfrom
mweinelt:werkzeug-2.3.8

Conversation

@mweinelt
Copy link
Member

https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-8

Description of changes

Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.11 Release Notes (or backporting 23.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@mweinelt mweinelt added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Nov 12, 2023
@github-actions github-actions bot added the 6.topic: python Python is a high-level, general-purpose programming language. label Nov 12, 2023
@ofborg ofborg bot added 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 2501-5000 This PR causes many rebuilds on Darwin and should target the staging branches. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 2501-5000 This PR causes many rebuilds on Linux and should target the staging branches. labels Nov 12, 2023
@risicle
Copy link
Contributor

risicle commented Nov 19, 2023

Well, cherry-picked to staging-next, passthru.tests successful for me on nixos x86_64.

@github-actions
Copy link
Contributor

github-actions bot commented Dec 1, 2023

Successfully created backport PR for staging-23.11:

@mweinelt mweinelt deleted the werkzeug-2.3.8 branch December 1, 2023 23:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 6.topic: python Python is a high-level, general-purpose programming language. 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 2501-5000 This PR causes many rebuilds on Darwin and should target the staging branches. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 2501-5000 This PR causes many rebuilds on Linux and should target the staging branches.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants