Overview

Request 1120656 accepted

- Update to 3.0.1:
* Fix slow multipart parsing for large parts potentially enabling DoS
attacks. (CVE-2023-46136, bsc#1216581)
* Remove previously deprecated code.
* Deprecate the ``__version__`` attribute. Use feature detection, or
``importlib.metadata.version("werkzeug")``, instead.
* ``generate_password_hash`` uses scrypt by default.
* Add the ``"werkzeug.profiler"`` item to the WSGI ``environ`` dictionary
passed to `ProfilerMiddleware`'s `filename_format` function. It contains
the ``elapsed`` and ``time`` values for the profiled request.
* Explicitly marked the PathConverter as non path isolating.

Request History
Steve Kowalik's avatar

StevenK created request

- Update to 3.0.1:
* Fix slow multipart parsing for large parts potentially enabling DoS
attacks. (CVE-2023-46136, bsc#1216581)
* Remove previously deprecated code.
* Deprecate the ``__version__`` attribute. Use feature detection, or
``importlib.metadata.version("werkzeug")``, instead.
* ``generate_password_hash`` uses scrypt by default.
* Add the ``"werkzeug.profiler"`` item to the WSGI ``environ`` dictionary
passed to `ProfilerMiddleware`'s `filename_format` function. It contains
the ``elapsed`` and ``time`` values for the profiled request.
* Explicitly marked the PathConverter as non path isolating.


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Saul Goodman's avatar

licensedigger accepted review

ok


Ana Guerrero's avatar

anag+factory set openSUSE:Factory:Staging:E as a staging project

Being evaluated by staging project "openSUSE:Factory:Staging:E"


Ana Guerrero's avatar

anag+factory accepted review

Picked "openSUSE:Factory:Staging:E"


Wolfgang Engel's avatar

bigironman accepted review

Accepted review for by_group opensuse-review-team request 1120656 from user anag+factory


Ana Guerrero's avatar

anag+factory accepted review

Staging Project openSUSE:Factory:Staging:E got accepted.


Ana Guerrero's avatar

anag+factory approved review

Staging Project openSUSE:Factory:Staging:E got accepted.


Ana Guerrero's avatar

anag+factory accepted request

Staging Project openSUSE:Factory:Staging:E got accepted.

openSUSE Build Service is sponsored by