diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2016-12-20 22:02:24 +0100 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2016-12-21 11:13:09 +0100 |
| commit | aa64e33c5176f89ddd1d505b8237e9f4718c2f71 (patch) | |
| tree | e3f0ecf79bfa423691863025eb350eff779da586 /package/python/103-optional-sqlite.patch | |
| parent | eed5ce47c72e8e8e31bf85b645f87536dfaf6808 (diff) | |
| download | buildroot-aa64e33c5176f89ddd1d505b8237e9f4718c2f71.tar.gz buildroot-aa64e33c5176f89ddd1d505b8237e9f4718c2f71.zip | |
python-bottle: security bump to 0.12.11
"\r\n" sequences were not properly filtered when handling redirections.
This allowed an attacker to perform CRLF attacks such as HTTP header
injection:
https://github.com/bottlepy/bottle/issues/913
Python-bottle now uses setuptools instead of distutils.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/python/103-optional-sqlite.patch')
0 files changed, 0 insertions, 0 deletions
