Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Ubuntu 21.10 & 20.04 LTS USN-5364-1 Critical Waitress Information Leak

ubuntu
Calendar Grey April 5, 2022
Dist Ubuntu Esm H88
Fedora Security Advisory FSA-1234-2 discusses the server vulnerability resulting in potential data leaks.
waitress could be made to expose sensitive information if it received a specially crafted request.

Summary

waitress could be made to expose sensitive information if it received

a specially crafted request.

Software Description:

- waitress: production-quality pure-Python WSGI server (documentation)

Details:

It was discovered that Waitress incorrectly handled certain requests.

An attacker could possibly use this issue to expose sensitive information.

Topics%20covered

Topics Covered

security advisory information leak critical Ubuntu waitress

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  python3-waitress                1.4.4-1.1ubuntu0.1

Ubuntu 20.04 LTS:
  python3-waitress                1.4.1-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5364-1

CVE-2022-24761

Severity
critical
Lowest
Low
Medium
High
Critical

April 05, 2022

Topics%20covered

Topics Covered

security advisory information leak critical Ubuntu waitress

Package Information

https://launchpad.net/ubuntu/+source/waitress/1.4.4-1.1ubuntu0.1
https://launchpad.net/ubuntu/+source/waitress/1.4.1-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.