Patches in https://ftp.belnet.be//mirror/ftp.opensuse.org/opensuse/update/leap/15.5/sle/src/python-waitress-2.1.2-150400.12.7.1.src.rpm

CVE: CVE-2024-49769 => CVE-2024-49768, CVE-2024-49769
Summary: python-waitress new security issue CVE-2024-49769 => python-waitress new security issues CVE-2024-49768 and CVE-2024-49769
Status comment: Fixed upstream in 3.0.1 and patch available from openSUSE => Fixed upstream in 3.0.1 and patches available from openSUSE

Thanks for the patch ref.
Assigning to Python group.

Assignee: bugsquad => python

Suggested advisory:
========================

The updated package fixes security vulnerabilities:

Waitress has request processing race condition in HTTP pipelining with invalid first request. (CVE-2024-49768)

Waitress has a denial of service leading to high CPU usage/resource exhaustion. (CVE-2024-49769)

References:
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019754.html
========================

Updated package in core/updates_testing:
========================
python3-waitress-2.1.2-1.1.mga9

from SRPM:
python-waitress-2.1.2-1.1.mga9.src.rpm

Assignee: python => qa-bugs
Source RPM: python-waitress-3.0.0-1.mga10.src.rpm, python-waitress-2.1.2-1.mga9.src.rpm => python-waitress-2.1.2-1.mga9.src.rpm
Status: NEW => ASSIGNED
Version: Cauldron => 9
Whiteboard: MGA9TOO => (none)
Status comment: Fixed upstream in 3.0.1 and patches available from openSUSE => (none)

RH x86_64

installing python3-waitress-2.1.2-1.1.mga9.noarch.rpm from //home/katnatek/qa-testing/x86_64
Preparing...                     ##################################################################################################
      1/1: python3-waitress      ##################################################################################################
      1/1: removing python3-waitress-2.1.2-1.mga9.noarch
                                 ##################################################################################################

Reference
https://bugs.mageia.org/show_bug.cgi?id=30248#c3

OK on clean install

CC: (none) => andrewsfarm
Whiteboard: (none) => MGA9-64-OK

Validating.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0053.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED