RHSA-2023:1018: Important: Red Hat OpenStack Platform 17.0 (python-werkzeug) security update

Werkzeug ======== Werkzeug started as simple collection of various<br>utilities for WSGI applications and has become one of the most advanced<br>WSGI utility modules. It includes a powerful debugger, full featured<br>request and response objects, HTTP utilities to handle entity tags, cache<br>control headers, HTTP dates, cookie handling, file uploads, a powerful URL<br>routing system and a bunch of community contributed addon modules. Werkzeug<br>is unicode aware and doesn't enforce a specific template engine, database<br>adapter or anything else. It doesn't even enforce a specific way of<br>handling requests and leaves all that up to the developer. It's most useful<br>for end user applications which should work on as many server environments<br>as possible (such as blogs, wikis, bulletin boards, etc.).<br>Security Fix(es):<br><li> high resource usage when parsing multipart form data with many fields</li> (CVE-2023-25577)<br>For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE<br>page listed in the References section.