Blob Blame History Raw
diff --git a/rhnplugin.py b/rhnplugin.py
index a2681c2..8f1cba0 100644
--- a/rhnplugin.py
+++ b/rhnplugin.py
@@ -427,7 +427,7 @@ class RhnRepo(YumRepository):
             # but we have to send and empty X-RHN-Auth-User-Id ...
             AuthUserH = 'X-RHN-Auth-User-Id'
             if (AuthUserH in self.http_headers and not self.http_headers[AuthUserH]):
-                self.http_headers[AuthUserH] = "\nX-libcurl-Empty-Header-Workaround: *"
+                self.http_headers[AuthUserH] = "\r\nX-libcurl-Empty-Header-Workaround: *"
 
         # Turn our dict into a list of 2-tuples
         headers = YumRepository._YumRepository__headersListFromDict(self)   # pylint: disable-msg=E1101
diff --git a/yum-rhn-plugin.spec b/yum-rhn-plugin.spec
index 1ced7dc..83c64d8 100644
--- a/yum-rhn-plugin.spec
+++ b/yum-rhn-plugin.spec
@@ -1,7 +1,7 @@
 Summary: Spacewalk support for yum
 Name: yum-rhn-plugin
 Version: 2.0.1
-Release: 6%{?dist}
+Release: 7%{?dist}
 License: GPLv2
 Group: System Environment/Base
 Source0: https://fedorahosted.org/releases/s/p/spacewalk/%{name}-%{version}.tar.gz
@@ -70,6 +70,10 @@ fi
 %doc LICENSE
 
 %changelog
+* Mon Feb 20 2017 Tomas Kasparek <tkasparek@redhat.com> 2.0.1-7
+- Resolves: #1423007 - request failed: error reading the headers
+  (CVE-2016-8743) (pstudeni@redhat.com)
+
 * Mon Jul 25 2016 Tomas Kasparek <tkasparek@redhat.com> 2.0.1-6
 - Resolves: #1359087 - expect additional arguments (tkasparek@redhat.com)