UbuntuUpdates.org

Package "python-webob"

Name: python-webob

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Python module providing WSGI request and response objects (documentation)
  • Python module providing WSGI request and response objects (Python 3)
Latest version: 1:1.8.7-1ubuntu0.1.24.04.2
Release: noble (24.04)
Level: updates
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "python-webob" in Noble

Repository Area Version
base main 1:1.8.7-1
security main 1:1.8.7-1ubuntu0.1.24.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:1.8.7-1ubuntu0.1.24.04.2 2026-09-16 09:07:27 UTC

python-webob (1:1.8.7-1ubuntu0.1.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: open redirect vulnerability
    - debian/patches/CVE-2026-44889.patch: Fix open redirect issue due to
      changes made in cPython >=3.10 in src/webob/response.py,
      tests/test_response.py.
    - CVE-2026-44889

  * debian/patches/fix-tests.patch: Backport of 7121e8c from main to fix test
    suite on Python >=3.10 which got a backported patch in
    tests/test_client_functional.py

 -- Shishir Subedi Mon, 14 Sep 2026 19:58:00 +0545
Source diff to previous version
CVE-2026-44889 WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerabl

Version: 1:1.8.7-1ubuntu0.1.24.04.1 2024-09-02 18:07:09 UTC

  python-webob (1:1.8.7-1ubuntu0.1.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Open redirect vulnerability
    - debian/patches/CVE-2024-42353.patch: fix adding
      checks in src/webob/response.py, test/test_response.py.
    - CVE-2024-42353

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 20 Aug 2024 16:30:14 -0300
CVE-2024-42353 WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by


About   -   Send Feedback to @ubuntu_updates