UbuntuUpdates.org

Package "python-webob-doc"

Name: python-webob-doc

Description:

Python module providing WSGI request and response objects (documentation)
Latest version: 1:1.8.6-1.1ubuntu0.2
Release: jammy (22.04)
Level: security
Repository: main
Head package: python-webob
Homepage: https://webob.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-webob-doc"

All arch deb package
APT INSTALL

Other versions of "python-webob-doc" in Jammy

Repository Area Version
base main 1:1.8.6-1.1
updates main 1:1.8.6-1.1ubuntu0.2

Changelog

Version: 1:1.8.6-1.1ubuntu0.2 2026-09-16 05:07:28 UTC

python-webob (1:1.8.6-1.1ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: open redirect vulnerability
    - debian/patches/CVE-2026-44889.patch: Fix open redirect issue due to
      changes made in cPython >=3.10 in src/webob/response.py,
      tests/test_response.py.
    - CVE-2026-44889

  * debian/patches/fix-tests.patch: Backport of 7121e8c from main to fix test
    suite on Python >=3.10 which got a backported patch in
    tests/test_client_functional.py

 -- Shishir Subedi Mon, 14 Sep 2026 19:58:14 +0545
Source diff to previous version
CVE-2026-44889 WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerabl

Version: 1:1.8.6-1.1ubuntu0.1 2024-09-02 17:07:01 UTC

  python-webob (1:1.8.6-1.1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Open redirect vulnerability
    - debian/patches/CVE-2024-42353.patch: fix adding
      checks in src/webob/response.py, test/test_response.py.
    - CVE-2024-42353

 -- Leonidas Da Silva Barbosa <email address hidden> Wed, 21 Aug 2024 06:01:46 -0300
CVE-2024-42353 WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by


About   -   Send Feedback to @ubuntu_updates