Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian DLA-2950-1 Moderate: Scrapy HTTP Authorization Leak

debian lts
Calendar Grey March 16, 2022
Dist Debian Esm H88
Discover the recent security patch for python-scrapy included in Debian LTS that tackles possible exposure of sensitive credentials.
It was found that Scrapy, a framework for extracting data from websites, could send HTTP Authorization as well as cookies to other domains in case of redirections, possibly leaking...
Topics%20covered

Topics Covered

security advisory security issue debian python credential leak scrapy

Summary

For Debian 9 stretch, these problems have been fixed in version
1.0.3-2+deb9u1.

We recommend that you upgrade your python-scrapy packages.

For the detailed security status of python-scrapy please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/python-scrapy

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: python-scrapy
Version: 1.0.3-2+deb9u1
CVE ID: CVE-2021-41125 CVE-2022-0577

Topics%20covered

Topics Covered

security advisory security issue debian python credential leak scrapy

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here