Peter Korsgaard aa64e33c51 python-bottle: security bump to 0.12.11 ...

"\r\n" sequences were not properly filtered when handling redirections.
This allowed an attacker to perform CRLF attacks such as HTTP header
injection:

https://github.com/bottlepy/bottle/issues/913

Python-bottle now uses setuptools instead of distutils.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2016-12-21 11:13:09 +01:00

232 B

Raw Blame History

View Raw