UbuntuUpdates.org

Package "python3-webob"

Name: python3-webob

Description:

Python module providing WSGI request and response objects (Python 3)
Latest version: 1:1.8.7-1ubuntu0.1.24.04.2
Release: noble (24.04)
Level: security
Repository: main
Head package: python-webob
Homepage: https://webob.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-webob"

All arch deb package
APT INSTALL

Other versions of "python3-webob" in Noble

Repository Area Version
base main 1:1.8.7-1
updates main 1:1.8.7-1ubuntu0.1.24.04.2

Changelog

Version: 1:1.8.7-1ubuntu0.1.24.04.2 2026-09-16 05:07:30 UTC

python-webob (1:1.8.7-1ubuntu0.1.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: open redirect vulnerability
    - debian/patches/CVE-2026-44889.patch: Fix open redirect issue due to
      changes made in cPython >=3.10 in src/webob/response.py,
      tests/test_response.py.
    - CVE-2026-44889

  * debian/patches/fix-tests.patch: Backport of 7121e8c from main to fix test
    suite on Python >=3.10 which got a backported patch in
    tests/test_client_functional.py

 -- Shishir Subedi Mon, 14 Sep 2026 19:58:00 +0545
Source diff to previous version
CVE-2026-44889 WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerabl

Version: 1:1.8.7-1ubuntu0.1.24.04.1 2024-09-02 17:07:01 UTC

  python-webob (1:1.8.7-1ubuntu0.1.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Open redirect vulnerability
    - debian/patches/CVE-2024-42353.patch: fix adding
      checks in src/webob/response.py, test/test_response.py.
    - CVE-2024-42353

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 20 Aug 2024 16:30:14 -0300
CVE-2024-42353 WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by


About   -   Send Feedback to @ubuntu_updates