python-WebOb-doc-1.8.11-1.1 on GA media (moderate)

python-WebOb-doc-1.8.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11864-1 Rating: moderate Cross-References: CVE-2026-54770 CVSS scores: CVE-2026-54770 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

SUSE SLES12 Security Update : python-WebOb (SUSE-SU-2026:4351-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4351-1 advisory. - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled ho...

Security update for python-WebOb

This update for python-WebOb fixes the following issues: CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft bsc1275917. Patch Instructions: To install this SUSE upda...

SUSE-SU-2026:4351-1 Security update for python-WebOb

This update for python-WebOb fixes the following issues: - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft bsc1275917...

Updated python-webob packages fix a security vulnerability

Location header normalization during redirect leads to open redirect - again...

MGASA-2026-0452 Updated python-webob packages fix a security vulnerability

Location header normalization during redirect leads to open redirect - again...

Security update for python-WebOb

This update for python-WebOb fixes the following issues: CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft bsc1275917. Patch Instructions: To install this SUSE upda...

OPENSUSE-SU-2026:11864-1 python-WebOb-doc-1.8.11-1.1 on GA media

These are all security issues fixed in the python-WebOb-doc-1.8.11-1.1 package on the GA media of openSUSE Tumbleweed...

NewStart CGSL MAIN 7.02 : python-webob Vulnerability (NS-SA-2026-0107)

The remote NewStart CGSL host, running version MAIN 7.02, has python-webob packages installed that are affected by a vulnerability: - WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the U...

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1. An upgraded version of the package is available that resolves this issue...

AZL-97575 CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1

WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response.makelocationabsolute in src/webob/response.py checks a Location value for a URI scheme or leading double slash before urllib.parse.urljoin strips leading C0 control characters and spaces. An attacker-controlled valu...

[SECURITY] Fedora 43 Update: python-webob-1.8.11-1.fc43

WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified behavior of HTTP, including header parsing and accessors for other standard parts of the environment...

[SECURITY] Fedora 44 Update: python-webob-1.8.11-1.fc44

WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified behavior of HTTP, including header parsing and accessors for other standard parts of the environment...

Fedora 44 : python-webob (2026-7aaa63dd24)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7aaa63dd24 advisory. Update to upstream - CVE-2024-42353. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 43 : python-webob (2026-cd35233572)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cd35233572 advisory. Update to upstream - CVE-2024-42353. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

SUSE SLED15 / SLES15 Security Update : python-WebOb (SUSE-SU-2026:2982-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2982-1 advisory. This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect...

Security update for python-WebOb

This update for python-WebOb fixes the following issue CVE-2026-44889: Location header normalization during redirect leads to open redirect bsc1268324. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:2982-1 Security update for python-WebOb

This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect leads to open redirect bsc1268324...

CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1

CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1. An upgraded version of the package is available that resolves this issue...

SUSE-SU-2026:22370-1 Security update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve

This update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve fixes the following issues: Changes in python-Markdown: - Fix tests with latest python version bsc1268243 Changes in python-joblib: - Update to 1.5.2:...