Fedora 27: Security Update for Python-Bottle CRLF Risk Mitigation

Bottle is a fast and simple micro-framework for small web-applications.

It offers request dispatching (Routes) with URL parameter support, Templates,

a built-in HTTP Server and adapters for many third party WSGI/HTTP-server and

template engines. All in a single file and with no dependencies other than the

Python Standard Library.

Update to 0.12.13

[ 1 ] Bug #1405417 - CVE-2016-9964 python-bottle: redirect() doesn't filter "\r\n" which allows for CRLF attack [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1405417

su -c 'dnf upgrade python-bottle' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org