RHSA-2020:0720: Low: python-waitress security update
Waitress is a pure Python WSGI server which supports HTTP/1.0 and HTTP/1.1.Security Fix(es): HTTP request smuggling through LF vs CRLF handling (CVE-2019-16785) HTTP request smuggling through invalid Transfer-Encoding (CVE-2019-16786) HTTP Request Smuggling through Invalid whitespace characters in headers (CVE-2019-16789)For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0720?
RHSA-2020:0720 addresses critical vulnerabilities related to HTTP request smuggling that can severely impact server security.
How do I fix RHSA-2020:0720?
To resolve RHSA-2020:0720, update the python-waitress and python3-waitress packages to version 1.4.2-1.el8.
What vulnerabilities are included in RHSA-2020:0720?
RHSA-2020:0720 includes vulnerabilities for HTTP request smuggling via LF vs CRLF handling and invalid Transfer-Encoding.
Which software is affected by RHSA-2020:0720?
RHSA-2020:0720 impacts the packages python-waitress and python3-waitress in their versions prior to 1.4.2-1.el8.
Is RHSA-2020:0720 related to CVE-2019-16785 and CVE-2019-16786?
Yes, RHSA-2020:0720 addresses the vulnerabilities identified as CVE-2019-16785 and CVE-2019-16786.