Advisories » MGASA-2026-0452

Updated python-webob packages fix a security vulnerability

Publication date: 25 Sep 2026
Modification date: 25 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-44889

Description

Location header normalization during redirect leads to open redirect -
again
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36323
• https://ubuntu.com/security/notices/USN-8759-1
• https://github.com/Pylons/webob/security/advisories/GHSA-fh3h-vg37-cc95
• https://www.cve.org/CVERecord?id=CVE-2026-44889

SRPMS

10/core

• python-webob-1.8.11-1.mga10

9/core

• python-webob-1.8.11-1.mga9