Skip to content

python-werkzeug: bump to 3.1.6#28934

Open
commodo wants to merge 1 commit intoopenwrt:masterfrom
commodo:python-werkzeug-bump-3.1.6
Open

python-werkzeug: bump to 3.1.6#28934
commodo wants to merge 1 commit intoopenwrt:masterfrom
commodo:python-werkzeug-bump-3.1.6

Conversation

@commodo
Copy link
Contributor

@commodo commodo commented Mar 21, 2026

📦 Package Details

Maintainer: me

Description:

Changelog since 3.1.3:

  • v3.1.4: Fix special device name access on Windows in send_from_directory (security); fix multipart parser \r\n handling at chunk boundaries; improve Watchdog reloader CPU efficiency
  • v3.1.5: Extend Windows path protection against special device names (security); fix multipart form parser \r\n at chunk boundaries; fix AttributeError in DebuggedApplication with pin_security=False
  • v3.1.6: Block special device names in multi-segment paths on Windows via safe_join (security)

Add test.sh.

Full changelog:
https://werkzeug.palletsprojects.com/en/stable/changes/


🧪 Run Testing Details

  • OpenWrt Version:
  • OpenWrt Target/Subtarget:
  • OpenWrt Device:

✅ Formalities

  • I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

Changelog since 3.1.3:
- v3.1.4: Fix special device name access on Windows in send_from_directory
  (security); fix multipart parser \r\n handling at chunk boundaries;
  improve Watchdog reloader CPU efficiency
- v3.1.5: Extend Windows path protection against special device names
  (security); fix multipart form parser \r\n at chunk boundaries; fix
  AttributeError in DebuggedApplication with pin_security=False
- v3.1.6: Block special device names in multi-segment paths on Windows
  via safe_join (security)

Add test.sh.

Full changelog:
https://werkzeug.palletsprojects.com/en/stable/changes/

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant