[SECURITY] Fedora 40 Update: python-webob-1.8.8-2.fc40

WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified behavior of HTTP, including header parsing and accessors for other standard parts of the environment...

[SECURITY] Fedora 39 Update: python-webob-1.8.8-2.fc39

WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified behavior of HTTP, including header parsing and accessors for other standard parts of the environment...

Fedora 39 : python-webob (2024-40ff0d8644)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-40ff0d8644 advisory. Update to upstream. Fix open redirect issue in 1.8-branch rhbz2305065 ---- Update to upstream. Fix open redirect issue in 1.8-branch rhbz2305065 Tenable has...

Fedora: Security Advisory (FEDORA-2024-40ff0d8644)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : python-webob (2024-a6817a2e80)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a6817a2e80 advisory. Update to upstream. Fix open redirect issue in 1.8-branch rhbz2305065 ---- Update to upstream. Fix open redirect issue in 1.8-branch rhbz2305065 Tenable has...

Fedora: Security Advisory (FEDORA-2024-a6817a2e80)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-42353 affecting package python-webob for versions less than 1.8.8-1

CVE-2024-42353 affecting package python-webob for versions less than 1.8.8-1. An upgraded version of the package is available that resolves this issue...

OESA-2024-2043 python-webob security update

WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified behavior of HTTP, including header parsing and accessors for other standard parts of the environment. Security Fixes: WebOb provides objects for HTTP...

OPENSUSE-SU-2024:14279-1 python-WebOb-doc-1.8.8-1.1 on GA media

These are all security issues fixed in the python-WebOb-doc-1.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES12 Security Update : python-WebOb (SUSE-SU-2024:2969-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2969-1 advisory. - CVE-2024-42353: Fixed open redirect via WebOb's Response object in Location header bsc1229221 Tenable has extracted the preceding...

openSUSE Security Advisory (SUSE-SU-2024:2970-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2970-1 Security update for python-WebOb

This update for python-WebOb fixes the following issues: - CVE-2024-42353: Fixed open redirect via WebOb's Response object in Location header bsc1229221...

SUSE-SU-2024:2969-1 Security update for python-WebOb

This update for python-WebOb fixes the following issues: - CVE-2024-42353: Fixed open redirect via WebOb's Response object in Location header bsc1229221...

SUSE CVE-2024-42353

WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. urlparse however treats a // at the...

Open Redirect Attack

WebOb is vulnerable to Open Redirect Attack. The vulnerability is due to improper handling of URLs by the urlparse within the response.py, which interprets URLs starting with // as lacking a scheme, causing the urljoin to incorrectly replace the original hostname...

CVE-2024-42353

A vulnerability was found in the WebOb package. WebOb normalizes the HTTP Location header using urlparse and urljoin. If the URL starts with //, urlparse treats the following part as the hostname, and replaces the original request's hostname. This issue, combined with user interaction, may become...

PYSEC-2024-188

WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. urlparse however treats a // at the...

CVE-2024-42353

WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. urlparse however treats a // at the...

PYSEC-2024-188

WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. urlparse however treats a // at the...

AZL-47826 CVE-2024-42353 affecting package python-webob for versions less than 1.8.8-1

WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. urlparse however treats a // at the...