Maniphest T6935

Update vyos-http-api-tools for package python-multipart security advisory
Closed, ResolvedPublicBUG
Actions

Assigned To

Authored By

	jestabro
	Dec 3 2024, 4:25 PM

Tags

Referenced Files

None

Subscribers

Description

Denial of service advisory for python-multipart < 0.0.18:
https://github.com/vyos/vyos-http-api-tools/security/dependabot/9

Regenerate requirements.txt to pull in python-multipart >= 0.0.18 (0.0.19, in fact).

Details

Version: -
Is it a breaking change?: Perfectly compatible
Issue type: Security vulnerability

Event Timeline

jestabro created this task.Dec 3 2024, 4:25 PM

jestabro triaged this task as High priority.

PR:
https://github.com/vyos/vyos-http-api-tools/pull/21
will replace the auto-generated
https://github.com/vyos/vyos-http-api-tools/pull/20

pasik subscribed.Dec 3 2024, 4:53 PM

dmbaturin moved this task from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.Dec 4 2024, 6:06 PM

dmbaturin moved this task from Open to Finished on the VyOS 1.5 Circinus board.

jestabro closed this task as Resolved.May 4 2025, 8:02 PM

jestabro removed a project: VyOS 1.3 Equuleus (1.3.9).

jestabro moved this task from Need Triage to Completed on the VyOS Rolling board.