Ubuntu Security Notice 4022-1 - It was discovered that gunicorn improperly handled certain input. An attacker could potentially use this issue execute a cross-site scripting attack.
ee98b227f2df8ccd05edca88b0bb8f93741475919fc6cd7d650f8cd0043d7ae6
==========================================================================
Ubuntu Security Notice USN-4022-1
June 19, 2019
Gunicorn vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
Summary:
Gunicorn could allow cross-site scripting (XSS) attacks.
Software Description:
- gunicorn: Python HTTP/WSGI server
Details:
It was discovered that gunicorn improperly handled certain input. An attacker
could potentially use this issue execute a cross-site scripting (XSS) attack.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 LTS:
gunicorn 19.4.5-1ubuntu1.1
gunicorn3 19.4.5-1ubuntu1.1
python-gunicorn 19.4.5-1ubuntu1.1
python3-gunicorn 19.4.5-1ubuntu1.1
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4022-1
CVE-2018-1000164
Package Information:
https://launchpad.net/ubuntu/+source/gunicorn/19.4.5-1ubuntu1.1