7fc6421be3
Fixes the following security issues:
- CVE-2025-47278: In Flask 3.1.0, the way fallback key configuration was
handled resulted in the last fallback key being used for signing,
rather than the current signing key.
For more information, see:
- https://nvd.nist.gov/vuln/detail/CVE-2025-47278
- 73d6504063
For more details on the version bump, see the release notes:
- https://github.com/pallets/flask/releases/tag/3.1.1
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 45439ae262)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
7 lines
416 B
Plaintext
7 lines
416 B
Plaintext
# md5, sha256 from https://pypi.org/pypi/flask/json
|
|
md5 59dc1b0772bab098aff83e8008e97af6 flask-3.1.1.tar.gz
|
|
sha256 284c7b8f2f58cb737f0cf1c30fd7eaf0ccfcde196099d24ecede3fc2005aa59e flask-3.1.1.tar.gz
|
|
# Locally computed sha256 checksums
|
|
sha256 489a8e1108509ed98a37bb983e11e0f7e1d31f0bd8f99a79c8448e7ff37d07ea LICENSE.txt
|
|
sha256 1e07e9c25f2618a040560b70e63f42259eab24e558d0f3532e6163d751cb4eea docs/license.rst
|