DSA-5138: -1 waitress -- security update
Published May 17, 2022
·Updated
It was discovered that the Waitress WSGI server was susceptible to HTTP request smuggling in some scenarios when used behind a proxy.
Affected Software
2 affected components
debian/waitress
debian/waitress
Event History
May 17, 2022
Advisory Published
12:00 AM
Frequently Asked Questions
1
Which deployments should be prioritized for remediation?
Prioritize Waitress deployments that operate behind a proxy, as the issue occurs in some proxy-backed scenarios.
2
What remediation information is available in this advisory?
The advisory identifies this as a Debian security update for the waitress package. No fixed package version or workaround is provided in the available data.