MGASA-2017-0031
- Source
- https://advisories.mageia.org/MGASA-2017-0031.html
- Import Source
- https://advisories.mageia.org/MGASA-2017-0031.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2017-0031
- Related
- Published
- 2017-01-29T22:31:20Z
- Modified
- 2017-01-29T22:22:06Z
- Summary
- Updated python-bottle packages fix security vulnerability
- Details
-
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call. (CVE-2016-9964)
- References
- Credits
-
-
- Mageia - COORDINATOR
-