Package: python-bottle / 0.12.15-2+deb10u2

Metadata

Package Version Patches format
python-bottle 0.12.15-2+deb10u2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0001 Remove bottle.py from scripts.patch | (download)

setup.py | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

 remove bottle.py from scripts


0002 Add CLI manpage.patch | (download)

docs/cli.rst | 46 46 + 0 - 0 !
docs/conf.py | 6 6 + 0 - 0 !
2 files changed, 52 insertions(+)

 add cli manpage


CVE 2020 28473.patch | (download)

bottle.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch] do not split query strings on `;` anymore.

Using `;` as a separator instead of `&` was allowed a long time ago,
but is now obsolete and actually invalid according to the 2014 W3C
recommendations. Even if this change is technically backwards-incompatible,
no real-world application should depend on broken behavior. If you REALLY
need this functionality, monkey-patch the _parse_qsl() function.

CVE 2022 31799.patch | (download)

bottle.py | 16 9 + 7 - 0 !
1 file changed, 9 insertions(+), 7 deletions(-)

 [patch] gracefully handle errors during early request binding.