MGASA-2017-0031

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0031.html

Import Source

https://advisories.mageia.org/MGASA-2017-0031.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0031

Related

CVE-2016-9964

Published

2017-01-29T22:31:20Z

Modified

2017-01-29T22:22:06Z

Summary

Updated python-bottle packages fix security vulnerability

Details

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call. (CVE-2016-9964)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / python-bottle

Package

Name: python-bottle
Purl: pkg:rpm/mageia/python-bottle?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.12.11-1.mga5

Ecosystem specific

{
    "section": "core"
}