diff mbox series

[meta-python,whinlatter,17/20] python3-werkzeug: upgrade 3.1.3 -> 3.1.4

Message ID 20260205065955.1267785-17-skandigraun@gmail.com
State New
Headers show
Series [meta-python,whinlatter,01/20] python3-cbor2: patch CVE-2025-68131 | expand

Commit Message

Gyorgy Sarvari Feb. 5, 2026, 6:59 a.m. UTC 
From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==============
- safe_join on Windows does not allow special device names. This prevents
  reading from these when using send_from_directory. secure_filename already
  prevented writing to these.
- The debugger pin fails after 10 attempts instead of 11.
- The multipart form parser handles a \r\n sequence at a chunk boundary.
- Improve CPU usage during Watchdog reloader.
- Request.json annotation is more accurate.
- Traceback rendering handles when the line number is beyond the available
  source lines.
- HTTPException.get_response annotation and doc better conveys the distinction
  between WSGI and sans-IO responses.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 74aa2bdac6d658791af34881f291d91aa4dc57ba)

Contains fix for CVE-2025-66221.

From the release notes:
This is the Werkzeug 3.1.4 fix release, which fixes bugs but does not otherwise
change behavior and should not result in breaking changes compared to the latest
feature release.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../{python3-werkzeug_3.1.3.bb => python3-werkzeug_3.1.4.bb}    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-werkzeug_3.1.3.bb => python3-werkzeug_3.1.4.bb} (90%)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-werkzeug_3.1.3.bb b/meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb
similarity index 90%
rename from meta-python/recipes-devtools/python/python3-werkzeug_3.1.3.bb
rename to meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb
index 73029eccc7..2cfb5864b1 100644
--- a/meta-python/recipes-devtools/python/python3-werkzeug_3.1.3.bb
+++ b/meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb
@@ -10,7 +10,7 @@  HOMEPAGE = "https://werkzeug.palletsprojects.com"
 LICENSE = "BSD-3-Clause"
 LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=5dc88300786f1c214c1e9827a5229462"
 
-SRC_URI[sha256sum] = "60723ce945c19328679790e3282cc758aa4a6040e4bb330f53d30fa546d44746"
+SRC_URI[sha256sum] = "cd3cd98b1b92dc3b7b3995038826c68097dcb16f9baa63abe35f20eafeb9fe5e"
 
 inherit pypi python_flit_core