Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Mageia 8: 2021-0162 Moderate: Python-Requests Open Redirect Vulnerability

mageia
Calendar Grey March 30, 2021
Dist Mageia Esm H88
The latest python-aiohttp release fixes a critical open redirect vulnerability that may lead to unauthorized URL redirections on Mageia platforms.
Beast Glatisant and Jelmer Vernooij reported that python-aiohttp is prone to an open redirect vulnerability

Summary

Beast Glatisant and Jelmer Vernooij reported that python-aiohttp is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website (CVE-2021-21330).

References

- https://bugs.mageia.org/show_bug.cgi?id=28490

- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg

- https://lists.debian.org/debian-security-announce/2021/msg00045.html

- https://www.cve.org/CVERecord?id=CVE-2021-21330

Resolution

SRPMS

- 8/core/python-aiohttp-3.7.4-1.mga8

Publication date: 30 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0161.html
Type: security
CVE: CVE-2021-21330

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here