Stay Secure with the Latest Linux Advisories

security advisorymoderate severitymoderate threat

Mageia 8: 2021-0162 Moderate: Python-Requests Open Redirect Vulnerability

Beast Glatisant and Jelmer Vernooij reported that python-aiohttp is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website (CVE-2021-21330). References: . MGASA-2021-0161 - Updated python-aiohttp package fixes security vulnerability Publication date: 30 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0161.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-21330 Beast Glatisant and Jelmer Vernooij reported that python-aiohttp is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website (CVE-2021-21330). References: - https://bugs.mageia.org/show_bug.cgi?id=28490 - https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg - https://lists.debian.org/debian-security-announce/2021/msg00045.html - https://www.cve.org/CVERecord?id=CVE-2021-21330 SRPMS: - 8/core/python-aiohttp-3.7.4-1.mga8 . The latest python-aiohttp release fixes a critical open redirect vulnerability that may lead to unauthorized URL redirections on Mageia platforms.. open redirect threat, python aiohttp, Mageia security advisory. . LinuxSecurity.com Team

Mar 30, 2021 Mageia