Commits
Peter Korsgaard committed c5c78f258a2
python-bottle: security bump to 0.12.11 "\r\n" sequences were not properly filtered when handling redirections. This allowed an attacker to perform CRLF attacks such as HTTP header injection: https://github.com/bottlepy/bottle/issues/913 Python-bottle now uses setuptools instead of distutils. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit aa64e33c5176f89ddd1d505b8237e9f4718c2f71)