[SECURITY] Fedora 36 Update: python-bottle-0.12.21-2.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-cc9a173168
2022-06-22 00:46:07.353466
--------------------------------------------------------------------------------
Name : python-bottle
Product : Fedora 36
Version : 0.12.21
Release : 2.fc36
URL : http://bottlepy.org
Summary : Fast and simple WSGI-framework for small web-applications
Description :
Bottle is a fast and simple micro-framework for small web-applications.
It offers request dispatching (Routes) with URL parameter support, Templates,
a built-in HTTP Server and adapters for many third party WSGI/HTTP-server and
template engines. All in a single file and with no dependencies other than the
Python Standard Library.
--------------------------------------------------------------------------------
Update Information:
Cookie test fix backported from upstream (0.12) ---- Security fix for
CVE-2022-3179
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 13 2022 Ali Erdinc Koroglu <aekoroglu(a)centosproject.org> - 0.12.21-2
- Cookie test fix backported from upstream (0.12)
* Thu Jun 9 2022 Ali Erdinc Koroglu <aekoroglu(a)centosproject.org> - 0.12.21-1
- Update to 0.12.21 (rhbz #2094655 + #2094654 and #2021856)
* Mon Feb 7 2022 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 0.12.19-1
- Update to 0.12.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2094655 - CVE-2022-31799 python-bottle: error mishandling during early
request binding [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2094655
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-cc9a173168' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------