Summary
USN-5532-1 fixed a vulnerability in Bottle. This update provides the
corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM
Original advisory details:
It was discovered that Bottle incorrectly handled errors during early request
binding. An attacker could possibly use this issue to disclose sensitive
information. (CVE-2022-31799)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | python-bottle | 0.12.0-1ubuntu0.1~esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | python-bottle | 0.12.7-1+deb8u1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Critical 9.8
Denial of service in bottle
Bottle before 0.12.20 mishandles errors during early request binding.
References
-
report
https://ubuntu.com/security/CVE-2022-31799