action needed
1 security issue in jessie
high
There is 1 open security issue in jessie.
1 important issue:
- CVE-2018-1000164: gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. This vulnerability appears to have been fixed in 19.5.0.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.1.4 instead of
4.1.3).
-
all:
2
-
RC:
1
-
I&N:
1
-
M&W:
0
-
F&P:
0
![[bug history graph]](https://qa.debian.org/data/bts/graphs/g/gunicorn.png){kind=link}