CVE:CVE-2023-29197
CNNVD:CNNVD-202304-1378
PSR-7 Message Implementation是一个完整的 PSR-7 消息实现。
PSR-7 Message Implementation 存在安全漏洞，该漏洞源于存在不正确的标头解析问题，攻击者利用该漏洞可以在标头名称和值中加入换行符。
solution:Upgrade guzzlephp psr-7 to a higher version than 1.9.1,2.4.5,and avoid the version (,1.9.1),[2.0.0,2.4.5); Upgrade fedoraproject fedora to a higher version than 37,38,and avoid the version 37,38