Resource exhaustion in Werkzeug - CVE-2023-25577

Vulnerability identifier: #VU72339

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-25577

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when parsing multipart form data with many fields. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Werkzeug
watsonx.data
Amazon Linux AMI
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE CaaS Platform
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
Fedora
SUSE Enterprise Storage
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Anolis OS
Public Cloud Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
IBM Cloud Pak for Watson AIOps
Storage Ceph
Storage Sentinel Anomaly Scan Engine
QRadar Assistant
SOAR QRadar Plugin App
IBM QRadar Incident Forensics
Robotic Process Automation for Cloud Pak
IBM Cloud Pak for Data System
Qradar Advisor
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Spectrum Discover
IBM Watson Assistant for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Elastic Storage System
IBM Maximo Application Suite
IBM Spectrum Protect Plus
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Cloud Pak for Security (CP4S)
Oracle Communications Cloud Native Core Policy
python3-werkzeug (Ubuntu package)
python-werkzeug (Ubuntu package)
python-tox-current-env (Red Hat package)
python-testrepository (Red Hat package)
python-nose-cover3 (Red Hat package)
toolbox (Red Hat package)
python-requests-unixsocket (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-m2r (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
python-oslo-metrics (Red Hat package)
python-smi (Red Hat package)
python-logutils (Red Hat package)
python-entrypoints (Red Hat package)
python-colorama (Red Hat package)
python-zipp (Red Hat package)
conmon-rs (Red Hat package)
python-tempita (Red Hat package)
python-pyroute2 (Red Hat package)
python-msgpack (Red Hat package)
python-trustme (Red Hat package)
python-defusedxml (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-mistune (Red Hat package)
crudini (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-lockfile (Red Hat package)
python-voluptuous (Red Hat package)
python-Werkzeug
python3-werkzeug
python-werkzeug-doc
python3-Werkzeug
python-scciclient (Red Hat package)
python-migrate (Red Hat package)
python-werkzeug (Red Hat package)
python-Werkzeug-doc
python-pyrsistent (Red Hat package)
tini (Red Hat package)
coreos-installer (Red Hat package)
python-fasteners (Red Hat package)
python-pytest-xprocess (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-eventlet (Red Hat package)
python-binary-memcached (Red Hat package)
python-openstacksdk (Red Hat package)
ansible-runner-http (Red Hat package)
python-linecache2 (Red Hat package)
python-werkzeug (Debian package)
python-hacking (Red Hat package)
python2-werkzeug
python3-werkzeug-doc
python-werkzeug
containernetworking-plugins (Red Hat package)
python2-Werkzeug
python-funcsigs (Red Hat package)
python-editor (Red Hat package)
venv-openstack-octavia-x86_64
python-pretend (Red Hat package)
python-mox3 (Red Hat package)
python-kiwisolver (Red Hat package)
python-unittest2 (Red Hat package)
python-flask (Red Hat package)
python-greenlet (Red Hat package)
python-dogpile-cache (Red Hat package)
runc (Red Hat package)
python-rfc3986 (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-yappi (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-cmd2 (Red Hat package)
python-traceback2 (Red Hat package)
python-ddt (Red Hat package)
python-alembic (Red Hat package)
python-kafka (Red Hat package)
ansible-runner (Red Hat package)
python-sqlalchemy (Red Hat package)
python-case (Red Hat package)
python-pyghmi (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
crun (Red Hat package)
python-webob (Red Hat package)
skopeo (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
grpc (Red Hat package)
cri-o (Red Hat package)
cri-tools (Red Hat package)
buildah (Red Hat package)
containers-common (Red Hat package)
python-memcached (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
python-markupsafe (Red Hat package)
python-waitress (Red Hat package)
python-itsdangerous (Red Hat package)
python-testresources (Red Hat package)
python-paste-deploy (Red Hat package)
python-webtest (Red Hat package)
python-os-client-config (Red Hat package)
python-uhashring (Red Hat package)
conmon (Red Hat package)
python-pytest-xdist (Red Hat package)
mingw-python-werkzeug
nmstate (Red Hat package)
haproxy (Red Hat package)
python-oslo-reports (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
python-debtcollector (Red Hat package)
python-stestr (Red Hat package)
python-osc-lib (Red Hat package)
oath-toolkit (Red Hat package)
python-kazoo (Red Hat package)
python-os-traits (Red Hat package)
python-typeguard (Red Hat package)
python-construct (Red Hat package)
python-proliantutils (Red Hat package)
venv-openstack-swift-x86_64
openstack-swift-container
openstack-swift
openstack-swift-account
python-swift
openstack-swift-object
openstack-swift-proxy
container-selinux (Red Hat package)
python-oslo-service (Red Hat package)
openvswitch3.0 (Red Hat package)
python-automaton (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
kata-containers (Red Hat package)
python-oslo-cache (Red Hat package)
python-cachetools (Red Hat package)
openvswitch3.1 (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-tooz (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-oslo-context (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-pymemcache (Red Hat package)
python-oslo-policy (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-cliff (Red Hat package)
python-swiftclient (Red Hat package)
python-glanceclient (Red Hat package)
python-stevedore (Red Hat package)
cephadm-ansible (Red Hat package)
python-oslo-serialization (Red Hat package)
libslirp (Red Hat package)
python-pyfakefs (Red Hat package)
python-decorator (Red Hat package)
python-oslotest (Red Hat package)
podman (Red Hat package)
python-sushy (Red Hat package)
pysnmp (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-rsa (Red Hat package)
python-ironicclient (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift-ansible (Red Hat package)
openshift-clients (Red Hat package)
openshift (Red Hat package)
openshift4-aws-iso (Red Hat package)
python-oslo-middleware (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python-vine (Red Hat package)
python-keystoneclient (Red Hat package)
python-oslo-concurrency (Red Hat package)
venv-openstack-magnum-x86_64
venv-openstack-designate-x86_64
python-amqp (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
python-zope-interface (Red Hat package)
python-coverage (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python-oslo-utils (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
venv-openstack-sahara-x86_64
python-more-itertools (Red Hat package)
python-neutronclient (Red Hat package)
python-dracclient (Red Hat package)
python-oslo-config (Red Hat package)
openstack-heat-plugin-heat_docker
openstack-heat-test
openstack-heat-doc
python-heat
openstack-heat
openstack-heat-engine
openstack-heat-api
openstack-heat-api-cloudwatch
openstack-heat-api-cfn
venv-openstack-heat-x86_64
python-oslo-db (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
venv-openstack-keystone-x86_64
python-service-identity (Red Hat package)
ceph (Red Hat package)
python-gunicorn (Red Hat package)
python-packaging (Red Hat package)
python-virtualenv (Red Hat package)
python-keyring (Red Hat package)
python-gevent (Red Hat package)
openstack-ironic (Red Hat package)
ovn22.12 (Red Hat package)
ovn23.03 (Red Hat package)
python-kubernetes (Red Hat package)
openstack-macros (Red Hat package)
Quay
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat Ceph Storage

Install updates from vendor's website.

Werkzeug - update to 2.2.3
IBM Cloud Pak for Data System - update to 1.0.8.0
watsonx.data - update to 2.3.1
IBM Cloud Pak for Multicloud Management - update to 2.3.8
Qradar Advisor - update to 2.6.5
Red Hat OpenShift Container Platform - addressed in versions 4.11.37, 4.12.10, 4.13.0
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Storage Ceph - update to 8.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 10
python3-werkzeug (Ubuntu package) - addressed in versions Ubuntu Pro, 0.14.1+dfsg1-1ubuntu0.2, 0.16.1+dfsg1-2ubuntu0.1, 2.0.2+dfsg1-1ubuntu0.22.04.1, 2.0.2+dfsg1-3ubuntu0.22.10.1, 2.2.2-2ubuntu0.1
python-werkzeug (Ubuntu package) - addressed in versions Ubuntu Pro, 0.14.1+dfsg1-1ubuntu0.2
python-tox-current-env (Red Hat package) - update to 0.0.6-1.el9
python-testrepository (Red Hat package) - update to 0.0.20-20.el9
python-nose-cover3 (Red Hat package) - update to 0.1.0-31.el9
toolbox (Red Hat package) - update to 0.1.2-1.rhaos4.13.el9
python-requests-unixsocket (Red Hat package) - addressed in versions 0.1.5-5.el8ar, 0.2.0-2.el9
python-ifaddr (Red Hat package) - addressed in versions 0.1.6-5.el8ost, 0.1.6-6.el9
python-wcwidth (Red Hat package) - update to 0.1.7-14.el8ost
python-iso8601 (Red Hat package) - update to 0.1.12-9.el9
python-m2r (Red Hat package) - update to 0.2.1-3.1.20190604git66f4a5a.el9
python-zake (Red Hat package) - update to 0.2.2-19.el9
python-sqlparse (Red Hat package) - update to 0.2.4-10.el9
python-oslo-metrics (Red Hat package) - addressed in versions 0.3.0-0.20211020174122.43eee50.el8, 0.5.0-0.20221128141719.fc22d0d.el9
python-smi (Red Hat package) - update to 0.3.4-10.el9
python-logutils (Red Hat package) - update to 0.3.5-7.1.el9
python-entrypoints (Red Hat package) - update to 0.3-8.el9
python-colorama (Red Hat package) - update to 0.4.1-2.el9
python-zipp (Red Hat package) - addressed in versions 0.5.1-2.el8ost, 0.5.1-3.el9
conmon-rs (Red Hat package) - update to 0.5.1-5.rhaos4.13.git.el9
python-tempita (Red Hat package) - update to 0.5.1-25.el9
python-pyroute2 (Red Hat package) - update to 0.5.13-1.el8ost
python-msgpack (Red Hat package) - addressed in versions 0.6.2-1.el8ost, 0.6.2-2.el9
python-trustme (Red Hat package) - update to 0.7.0-1.el9
python-defusedxml (Red Hat package) - update to 0.7.1-1.el9
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el9
python-repoze-lru (Red Hat package) - update to 0.7-7.el9
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el9
python-dataclasses (Red Hat package) - update to 0.8-2.el9
python-mistune (Red Hat package) - update to 0.8.3-15.1.el9
crudini (Red Hat package) - update to 0.9.3-4.el9
python-pint (Red Hat package) - addressed in versions 0.10.1-1.el8ost, 0.10.1-3.el9
python-wsme (Red Hat package) - update to 0.11.0-0.20221128135154.80bda90.el9
python-lockfile (Red Hat package) - update to 0.11.0-8.el8ar
python-voluptuous (Red Hat package) - update to 0.11.7-3.el9
python-Werkzeug - addressed in versions 0.12.2-3.6.2, 0.12.2-10.13.1, 0.14.1-3.6.2
python3-werkzeug - update to 0.12.2-7
python-werkzeug-doc - update to 0.12.2-7
python3-Werkzeug - addressed in versions 0.12.2-10.13.1, 0.14.1-150100.6.6.1, 1.0.1-150300.3.3.1
python-scciclient (Red Hat package) - update to 0.12.3-0.20221128150506.0940a71.el9
python-migrate (Red Hat package) - update to 0.13.0-2.el9
python-werkzeug (Red Hat package) - addressed in versions 0.14.1-3.1.el7ost, 0.14.1-12.el8ost, 1.0.1-3.el8ost, 2.0.1-5.el9ost, 2.0.3-4.el9, 2.0.3-5.el8, 2.2.3-2.el9
python-Werkzeug-doc - update to 0.14.1-150100.6.6.1
python-pyrsistent (Red Hat package) - update to 0.16.0-3.el8ost
tini (Red Hat package) - update to 0.16.1-1.el8ar
coreos-installer (Red Hat package) - update to 0.17.0-1.rhaos4.13.el9
python-fasteners (Red Hat package) - update to 0.18-1.el9
python-pytest-xprocess (Red Hat package) - update to 0.18.1-4.el9
python-zeroconf (Red Hat package) - addressed in versions 0.24.4-1.el8ost, 0.24.4-2.el9
python-hardware (Red Hat package) - update to 0.30.0-0.20221128155150.f6ff0ed.el9
python-eventlet (Red Hat package) - addressed in versions 0.30.2-1.el8, 0.33.1-4.el9, 0.33.1-5.el9
python-binary-memcached (Red Hat package) - update to 0.31.1-1.el9
python-openstacksdk (Red Hat package) - update to 0.102.0-0.20221128160622.9a17781.el9
ansible-runner-http (Red Hat package) - update to 1.0.0-2.el8ar
python-linecache2 (Red Hat package) - update to 1.0.0-25.el9
python-werkzeug (Debian package) - update to 1.0.1+dfsg1-2+deb11u1
python-hacking (Red Hat package) - update to 1.0.1-0.20210812104123.865398f.el9
python2-werkzeug - update to 1.0.1-2
python3-werkzeug-doc - update to 1.0.1-2
python3-werkzeug - update to 1.0.1-2
python-werkzeug - update to 1.0.1-2
python3-werkzeug - update to 1.0.1-2.el7
python-werkzeug - update to 1.0.1-5
containernetworking-plugins (Red Hat package) - update to 1.0.1-6.rhaos4.13.el8
python2-Werkzeug - update to 1.0.1-150300.3.3.1
python-funcsigs (Red Hat package) - update to 1.0.2-17.el9
python-editor (Red Hat package) - update to 1.0.4-5.el9
venv-openstack-octavia-x86_64 - addressed in versions 1.0.6~dev3-12.47.1, 3.2.3~dev7-4.41.2
python-pretend (Red Hat package) - update to 1.0.8-19.el9
python-mox3 (Red Hat package) - update to 1.1.0-0.20210812114029.99a302f.el9
python-kiwisolver (Red Hat package) - update to 1.1.0-4.el9
python-unittest2 (Red Hat package) - update to 1.1.0-24.el9
python-flask (Red Hat package) - update to 1.1.1-1.el8ost
python-greenlet (Red Hat package) - update to 1.1.3-1.el9
Storage Sentinel Anomaly Scan Engine - update to 1.1.4.1
python-dogpile-cache (Red Hat package) - update to 1.1.5-3.el9
runc (Red Hat package) - addressed in versions 1.1.6-3.rhaos4.13.el8, 1.1.6-3.rhaos4.13.el9
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el9
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el9
python-yappi (Red Hat package) - update to 1.3.1-2.el9
python-pecan (Red Hat package) - update to 1.3.2-10.el9
python-warlock (Red Hat package) - update to 1.3.3-2.el9
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20221128134625.d7ac0ff.el9
python-cmd2 (Red Hat package) - update to 1.4.0-1.1.el8
python-traceback2 (Red Hat package) - update to 1.4.0-25.el9
python-ddt (Red Hat package) - update to 1.4.2-1.el9
python-alembic (Red Hat package) - addressed in versions 1.4.2-5.el8ost, 1.6.0-1.el9
python-kafka (Red Hat package) - update to 1.4.3-3.el9
ansible-runner (Red Hat package) - update to 1.4.6-2.el8ar
python-sqlalchemy (Red Hat package) - update to 1.4.39-2.el9
python-case (Red Hat package) - update to 1.5.3-5.el9
python-pyghmi (Red Hat package) - update to 1.5.14-2.1.el8ost
python-pyperclip (Red Hat package) - update to 1.6.4-6.el8ost
python-os-service-types (Red Hat package) - update to 1.7.0-0.20221128134625.0b2f473.el9
python-importlib-metadata (Red Hat package) - addressed in versions 1.7.0-1.el8ost, 4.12.0-2.el9
crun (Red Hat package) - update to 1.8.4-1.rhaos4.13.el9
python-webob (Red Hat package) - update to 1.8.5-5.el9
skopeo (Red Hat package) - update to 1.10.0-1.rhaos4.13.el9
fuse-overlayfs (Red Hat package) - update to 1.10-2.rhaos4.13.el8
Cloud Pak for Security (CP4S) - update to 1.10.12.0
python-pycdlib (Red Hat package) - update to 1.11.0-3.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el9
grpc (Red Hat package) - update to 1.18.0-4.el8ost
cri-o (Red Hat package) - addressed in versions 1.25.2-13.rhaos4.12.git3e4b64e.el9, 1.26.3-3.rhaos4.13.git641290e.el9, 1.27.2-2.rhaos4.14.git9d684e2.el8, 1.27.2-2.rhaos4.14.git9d684e2.el9
cri-tools (Red Hat package) - update to 1.26.0-1.el9
buildah (Red Hat package) - update to 1.29.1-1.rhaos4.13.el9
containers-common (Red Hat package) - update to 1-35.rhaos4.13.el9
python-memcached (Red Hat package) - update to 1.58-12.el9
python-oslo-upgradecheck (Red Hat package) - update to 2.0.0-0.20221128142932.b3a2b19.el9
python-markupsafe (Red Hat package) - addressed in versions 2.0.0-2.el9, 2.1.1-4.el9
python-waitress (Red Hat package) - update to 2.0.0-2.el9
python-itsdangerous (Red Hat package) - update to 2.0.1-2.el9
python-testresources (Red Hat package) - update to 2.0.1-2.el9
python-paste-deploy (Red Hat package) - addressed in versions 2.0.1-4.el8ost, 2.0.1-5.el9
Spectrum Discover - addressed in versions 2.0.4.8, 2.1.1
python-webtest (Red Hat package) - update to 2.0.33-5.el9
python-os-client-config (Red Hat package) - update to 2.1.0-0.20210722194729.bc96c23.el9
python-uhashring (Red Hat package) - update to 2.1-2.el9
conmon (Red Hat package) - addressed in versions 2.1.7-1.rhaos4.13.el8, 2.1.7-1.rhaos4.13.el9
python-pytest-xdist (Red Hat package) - update to 2.2.1-1.el9
mingw-python-werkzeug - addressed in versions 2.2.3-1.fc37, 2.2.3-1.fc38
nmstate (Red Hat package) - update to 2.2.9-6.rhaos4.13.el8
haproxy (Red Hat package) - addressed in versions 2.2.24-3.rhaos4.13.el8, 2.6.13-2.rhaos4.14.el8
python-oslo-reports (Red Hat package) - update to 2.3.0-0.20211012151507.f2799dc.el9
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el9
python-munch (Red Hat package) - update to 2.3.2-7.el9
python-futurist (Red Hat package) - update to 2.4.1-0.20221128140910.159d752.el9
python-routes (Red Hat package) - update to 2.4.1-12.el9
python-debtcollector (Red Hat package) - update to 2.5.0-0.20221128140303.a6b46c5.el9
python-stestr (Red Hat package) - update to 2.6.0-8.el9
python-osc-lib (Red Hat package) - update to 2.6.2-0.20221128150506.d438afa.el9
oath-toolkit (Red Hat package) - addressed in versions 2.6.12-1.el8cp, 2.6.12-1.el9cp
python-kazoo (Red Hat package) - update to 2.7.0-2.el9
python-os-traits (Red Hat package) - update to 2.9.0-0.20221128153153.fc91a78.el9
python-typeguard (Red Hat package) - update to 2.9.1-1.el9
python-construct (Red Hat package) - addressed in versions 2.10.56-1.el8ost, 2.10.56-2.el9
python-proliantutils (Red Hat package) - update to 2.14.0-0.20221128154535.de9759c.el9
venv-openstack-swift-x86_64 - update to 2.19.3~dev3-2.36.3
openstack-swift-container - update to 2.19.3~dev3-3.6.3
openstack-swift - update to 2.19.3~dev3-3.6.3
openstack-swift-account - update to 2.19.3~dev3-3.6.3
python-swift - update to 2.19.3~dev3-3.6.3
openstack-swift-object - update to 2.19.3~dev3-3.6.3
openstack-swift-proxy - update to 2.19.3~dev3-3.6.3
container-selinux (Red Hat package) - addressed in versions 2.208.0-2.rhaos4.13.el8, 2.208.0-2.rhaos4.13.el9
python-oslo-service (Red Hat package) - update to 3.0.0-0.20221128144658.a27acfe.el9
openvswitch3.0 (Red Hat package) - update to 3.0.0-28.el9fdp
python-automaton (Red Hat package) - update to 3.0.1-0.20221128143847.0ea747e.el9
python-oslo-versionedobjects (Red Hat package) - update to 3.0.1-0.20221128145846.2b12029.el9
kata-containers (Red Hat package) - update to 3.0.2-5.el9
python-oslo-cache (Red Hat package) - update to 3.1.0-0.20221129203427.7fb06bc.el9
python-cachetools (Red Hat package) - update to 3.1.0-4.el9
openvswitch3.1 (Red Hat package) - update to 3.1.0-10.el9fdp
python-pycadf (Red Hat package) - update to 3.1.1-0.20221128135153.4179996.el9
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20221128155706.eb27243.el9
python-bcrypt (Red Hat package) - update to 3.1.6-3.el9
python-tooz (Red Hat package) - update to 3.2.0-0.20221128162335.1a76dd6.el9
python-jsonschema (Red Hat package) - update to 3.2.0-5.el8ost
python-statsd (Red Hat package) - update to 3.2.1-20.el9
python-paste (Red Hat package) - update to 3.2.4-1.el8ost
python-oslo-context (Red Hat package) - addressed in versions 3.3.1-0.20211012152439.641a1e0.el8, 5.0.0-0.20221128142633.f388eb9.el9
python-redis (Red Hat package) - update to 3.3.8-2.el9
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el9
python-osprofiler (Red Hat package) - update to 3.4.3-0.20221128140710.3286301.el9
python-pymemcache (Red Hat package) - update to 3.5.0-1.el9
QRadar Assistant - update to 3.7.0
python-oslo-policy (Red Hat package) - addressed in versions 3.8.2-0.20211012161944.c7fd9f4.el8, 4.0.0-0.20221128143837.5bd767b.el9
Quay - update to 3.10.0
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el9
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4, 4.14.18, 4.15.14
python-cliff (Red Hat package) - update to 4.0.0-0.20221128185800.58c853d.el9
python-swiftclient (Red Hat package) - update to 4.1.0-0.20221128153149.662e530.el9
python-glanceclient (Red Hat package) - update to 4.1.0-0.20221128153803.f2999ce.el9
python-stevedore (Red Hat package) - update to 4.1.0-0.20221128161654.9eb8094.el9
cephadm-ansible (Red Hat package) - update to 4.1.4-1.el9cp
python-oslo-serialization (Red Hat package) - addressed in versions 4.2.0-0.20211012151454.2b94a4f.el8, 5.0.0-0.20221128142424.dd2a819.el9
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-pyfakefs (Red Hat package) - update to 4.4.0-4.el9
python-decorator (Red Hat package) - update to 4.4.0-6.el9
python-oslotest (Red Hat package) - update to 4.4.1-0.20210812115053.aaf3a72.el9
podman (Red Hat package) - addressed in versions 4.4.1-3.rhaos4.13.el8, 4.4.1-3.rhaos4.13.el9
python-sushy (Red Hat package) - update to 4.4.3-0.20230425095526.9f708cf.el9
pysnmp (Red Hat package) - update to 4.4.12-6.el9
python-oslo-log (Red Hat package) - addressed in versions 4.6.0-0.20211012154701.41c8807.el8, 5.0.0-0.20221128143137.6401da7.el9
python-pexpect (Red Hat package) - addressed in versions 4.6-2.el8ar, 4.6-3.el9
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.6.3
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.5
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.7
python-rsa (Red Hat package) - update to 4.7-1.el8
python-ironicclient (Red Hat package) - update to 4.9.0-0.20211209154934.6f1be06.el9
atomic-openshift-service-idler (Red Hat package) - addressed in versions 4.11.0-202304070715.p0.ga0f9090.assembly.stream.el8, 4.13.0-202303172327.p0.ga0f9090.assembly.stream.el8
openshift-kuryr (Red Hat package) - addressed in versions 4.11.0-202304070715.p0.g93daed6.assembly.stream.el8, 4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
openshift-ansible (Red Hat package) - addressed in versions 4.11.0-202304070715.p0.gdf73941.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9
openshift-clients (Red Hat package) - addressed in versions 4.11.0-202304070715.p0.gdea6f47.assembly.stream.el8, 4.12.0-202303240916.p0.g31aa3e8.assembly.stream.el8, 4.12.0-202303240916.p0.g31aa3e8.assembly.stream.el9, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
openshift (Red Hat package) - addressed in versions 4.11.0-202304082115.p0.gceaf338.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el9, 4.14.0-202311161233.p0.gd548052.assembly.stream.el8, 4.14.0-202311161233.p0.gd548052.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - addressed in versions 4.12.0-202303221729.p0.g6b545b8.assembly.stream.el8, 4.13.0-202304052215.p0.gd2acdd5.assembly.stream.el8
python-oslo-middleware (Red Hat package) - update to 5.0.0-0.20221128142027.51e1882.el9
python-keystoneauth1 (Red Hat package) - update to 5.0.0-0.20221128144522.2445a5d.el9
python-sushy-oem-idrac (Red Hat package) - update to 5.0.0-0.20221128204359.da9a0e4.el9
python-vine (Red Hat package) - update to 5.0.0-3.el9
python-keystoneclient (Red Hat package) - update to 5.0.1-0.20221128145838.bc8e9e7.el9
python-oslo-concurrency (Red Hat package) - update to 5.0.1-0.20221129205158.01cf2ff.el9
venv-openstack-magnum-x86_64 - addressed in versions 5.0.2_5.0.2_5.0.2~dev31-11.46.1, 7.2.1~dev1-4.41.3
venv-openstack-designate-x86_64 - addressed in versions 5.0.3~dev7-12.45.1, 7.0.2~dev2-3.41.2
SOAR QRadar Plugin App - update to 5.0.3
python-amqp (Red Hat package) - update to 5.0.6-1.el9
python-oslo-i18n (Red Hat package) - addressed in versions 5.1.0-0.20211012165753.b031d17.el8, 5.1.0-0.20221128135758.b031d17.el9
python-ironic-lib (Red Hat package) - update to 5.3.0-0.20221128152640.340a4b2.el9
python-zope-interface (Red Hat package) - update to 5.4.0-1.el9
python-coverage (Red Hat package) - update to 5.6-0.1b1.el9
kernel (Red Hat package) - update to 5.14.0-284.13.1.el9_2
kernel-rt (Red Hat package) - update to 5.14.0-284.13.1.rt14.298.el9_2
python-oslo-utils (Red Hat package) - update to 6.0.1-0.20221128145135.760deb9.el9
IBM Elastic Storage System - update to 6.1.8.1
python-tenacity (Red Hat package) - addressed in versions 6.2.0-1.el8ost, 6.2.0-2.el9
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20221128140202.1b1b960.el9
venv-openstack-sahara-x86_64 - addressed in versions 7.0.5~dev4-11.46.1, 9.0.2~dev15-3.41.2
Red Hat Ceph Storage - addressed in versions 7.1, 8.1
python-more-itertools (Red Hat package) - update to 7.2.0-3.el9
IBM QRadar Incident Forensics - update to 7.5.0.10
python-neutronclient (Red Hat package) - update to 7.6.0-0.20211012175718.983f0ab.el9
python-dracclient (Red Hat package) - update to 8.0.0-0.20221128135758.9c7499c.el9
python-oslo-config (Red Hat package) - addressed in versions 8.7.1-0.20211012155707.1a7bd66.el8, 9.0.0-0.20221128141318.9eaae04.el9
IBM Maximo Application Suite - addressed in versions 8.8.8, 8.9.4, 8.10.1
openstack-heat-plugin-heat_docker - addressed in versions 9.0.8~dev22-3.30.3, 11.0.4~dev4-3.24.4
openstack-heat-test - update to 9.0.8~dev22-3.30.3
openstack-heat-doc - update to 9.0.8~dev22-3.30.3
python-heat - addressed in versions 9.0.8~dev22-3.30.3, 11.0.4~dev4-3.24.4
openstack-heat - addressed in versions 9.0.8~dev22-3.30.3, 11.0.4~dev4-3.24.4
openstack-heat-engine - addressed in versions 9.0.8~dev22-3.30.3, 11.0.4~dev4-3.24.4
openstack-heat-api - addressed in versions 9.0.8~dev22-3.30.3, 11.0.4~dev4-3.24.4
openstack-heat-api-cloudwatch - update to 9.0.8~dev22-3.30.3
openstack-heat-api-cfn - addressed in versions 9.0.8~dev22-3.30.3, 11.0.4~dev4-3.24.4
venv-openstack-heat-x86_64 - addressed in versions 9.0.8~dev22-12.51.1, 11.0.4~dev4-3.43.2
python-oslo-db (Red Hat package) - addressed in versions 9.1.0-0.20211020204148.be2cc6a.el8, 12.2.0-0.20221128163146.a191d2e.el9
python-cinderclient (Red Hat package) - update to 9.1.0-0.20221128151726.730a8c7.el9
openstack-ironic-python-agent (Red Hat package) - update to 9.2.0-0.20221128164006.a167075.el9
python-keystonemiddleware (Red Hat package) - update to 10.1.0-0.20221128152538.f7ac6a1.el9
IBM Spectrum Protect Plus - update to 10.1.15
openstack-ironic-inspector (Red Hat package) - update to 11.2.0-0.20221128164644.d83454c.el9
python-oslo-messaging (Red Hat package) - addressed in versions 12.9.1-0.20211020204149.f9de265.el8, 14.0.0-0.20221128151928.e44f286.el9
venv-openstack-keystone-x86_64 - update to 14.2.1~dev9-3.42.2
python-service-identity (Red Hat package) - update to 18.1.0-9.1.el9
ceph (Red Hat package) - addressed in versions 18.2.1-329.el8cp, 18.2.1-329.el9cp, 19.2.1-222.el9cp
python-gunicorn (Red Hat package) - update to 20.0.4-2.el9
python-packaging (Red Hat package) - update to 20.4-1.el8ost
python-virtualenv (Red Hat package) - update to 20.4.4-1.el9
python-keyring (Red Hat package) - update to 21.0.0-2.el9
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.3
python-gevent (Red Hat package) - update to 21.1.2-1.el9
openstack-ironic (Red Hat package) - update to 21.2.0-0.20221209211422.b70b418.el9
ovn22.12 (Red Hat package) - update to 22.12.0-25.el9fdp
ovn23.03 (Red Hat package) - update to 23.03.0-7.el9fdp
python-kubernetes (Red Hat package) - update to 25.3.0-1.el8
openstack-macros (Red Hat package) - update to 2020.1.2-1.el9

• https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1
• https://github.com/pallets/werkzeug/releases/tag/2.2.3
• https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323

• Multiple vulnerabilities in Werkzeug
• Denial of service in Red Hat OpenStack Platform
• Ubuntu update for python-werkzeug
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Red Hat OpenStack Platform update for python-werkzeug
• SUSE update for python-Werkzeug
• SUSE update for python-Werkzeug
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in IBM Cloud Pak for Data System
• SUSE update for python-Werkzeug
• OpenShift Container Platform 4.12 update for Werkzeug
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• OpenShift Container Platform 4.11 update for Werkzeug
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• OpenShift Container Platform release 4.13 update for golang
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in IBM QRadar Advisor With Watson App for IBM QRadar SIEM
• SUSE update for openstack-heat, python-Werkzeug
• SUSE update for openstack-heat, openstack-swift, python-Werkzeug
• Multiple vulnerabilities in IBM Maximo Application Suite
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in IBM Spectrum Protect Plus File Systems Agent
• Ubuntu update for python-werkzeug
• Multiple vulnerabilities in IBM Spectrum Discover
• Resource exhaustion in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Spectrum Sentinel Anomaly Scan Engine
• Debian update for python-werkzeug
• Multiple vulnerabilities in IBM Elastic Storage System
• Fedora 38 update for mingw-python-werkzeug
• Fedora 37 update for mingw-python-werkzeug
• Fedora EPEL 7 update for python3-werkzeug
• Multiple vulnerabilities in IBM SOAR QRadar Plugin App
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in Red Hat Quay
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.14
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• openEuler update for python-werkzeug
• Multiple vulnerabilities in IBM QRadar Assistant
• Amazon Linux AMI update for python-werkzeug
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in QRadar Incident Forensics
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Anolis OS update for python-werkzeug
• Multiple vulnerabilities in Red Hat Ceph Storage 7
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage)
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.15
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Multiple vulnerabilities in Red Hat Ceph Storage 8
• Multiple vulnerabilities in IBM Storage Ceph
• Multiple vulnerabilities in IBM watsonx.data