ALAS2-2022-1844 — Moderate: python-bottle security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-31799: Bottle before 0.12.20 mishandles errors during early request binding.

Fixed packages 1

Release	Package	Fixed in
Amazon Linux · 2	python3-bottle	0:0.12.21-2.amzn2

Vulnerabilities 1

Critical 9.8

CVE-2022-31799

Denial of service in bottle

Bottle before 0.12.20 mishandles errors during early request binding.

python-bottle bottle python-bottle py3-bottle Debian Ubuntu Alpine PyPI

May 29, 2022

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-31799.html

Moderate: python-bottle security update (Amazon Linux 2)

Summary

Fixed packages 1

Vulnerabilities 1

Denial of service in bottle

References