SUSE-SU-2020:3292-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:3292-1

Related

Published

2020-11-11T11:27:32Z

Modified

2020-11-11T11:27:32Z

Summary

Security update for python-waitress

Details

This update for python-waitress to version 1.4.3 fixes the following security issues:

CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088).
CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089).
CVE-2019-16789: HTTP request smuggling through invalid whitespace characters (bsc#1160790).
CVE-2019-16792: HTTP request smuggling by sending the Content-Length header twice (bsc#1161670).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.4.3-3.3.1

{
    "binaries": [
        {
            "python-waitress": "1.4.3-3.3.1"
        }
    ]
}