ALAS2-2022-1844

Related Vulnerabilities: CVE-2022-31799  

Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

ALAS2-2022-1844


Amazon Linux 2 Security Advisory: ALAS-2022-1844
Advisory Release Date: 2022-09-01 21:09 Pacific
Advisory Updated Date: 2022-09-14 00:02 Pacific
Severity: Critical
References: CVE-2022-31799 

Issue Overview:

Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)


Affected Packages:

python-bottle


Issue Correction:
Run yum update python-bottle to update your system.

New Packages:
noarch:
    python3-bottle-0.12.21-2.amzn2.noarch

src:
    python-bottle-0.12.21-2.amzn2.src