Publishing details

Published on 2022-03-30
Copied from ubuntu bionic in PPA for Ubuntu Security Proposed by Ray Veldkamp

Changelog

twisted (17.9.0-2ubuntu0.3) bionic-security; urgency=medium

  * SECURITY UPDATE: Information disclosure results in leaking of HTTP cookie
    and authorization headers when following cross origin redirects
    - debian/patches/CVE-2022-21712-*.patch: Ensure sensitive HTTP headers are
      removed when forming requests, in src/twisted/web/client.py,
      src/twisted/web/test/test_agent.py and src/twisted/web/iweb.py.
    - CVE-2022-21712

  * SECURITY UPDATE: Parsing of SSH version identifier field during an SSH
    handshake can result in a denial of service when excessively large packets
    are received
    - debian/patches/CVE-2022-21716-*.patch: Ensure that length of received
      handshake buffer is checked, prior to processing version string in
      src/twisted/conch/ssh/transport.py and
      src/twisted/conch/test/test_transport.py
    - CVE-2022-21716

 -- Ray Veldkamp <email address hidden>  Tue, 22 Mar 2022 22:03:56 +1100

Available diffs

diff from 17.9.0-2ubuntu0.1 to 17.9.0-2ubuntu0.3 (9.2 KiB)
diff from 17.9.0-2ubuntu0.2 to 17.9.0-2ubuntu0.3 (6.3 KiB)

Builds

Built packages

python-twisted Event-based framework for internet applications (dependency package)

python-twisted-bin Event-based framework for internet applications

python-twisted-bin-dbg Event-based framework for internet applications (debug extension)

python-twisted-conch twisted dummy package for Twisted SSH Implementation

python-twisted-core Event-based framework for internet applications

python-twisted-mail twisted dummy package for SMTP, IMAP and POP protocol implementation

python-twisted-names twisted package for DNS protocol implementation

python-twisted-news twisted dummy package for NNTP protocol implementation

python-twisted-runner twisted dummy package for process management

python-twisted-runner-dbg twisted dummy package for process management

python-twisted-web twisted dummy package for HTTP protocol implementation

python-twisted-words twisted dummy package for Chat and Instant Messaging

python3-twisted Event-based framework for internet applications

python3-twisted-bin Event-based framework for internet applications

python3-twisted-bin-dbg Event-based framework for internet applications (debug extension)

twisted-doc Official documentation of Twisted

Package files

python-twisted-bin-dbg_17.9.0-2ubuntu0.3_amd64.deb (51.3 KiB)
python-twisted-bin-dbg_17.9.0-2ubuntu0.3_arm64.deb (50.1 KiB)
python-twisted-bin-dbg_17.9.0-2ubuntu0.3_armhf.deb (51.2 KiB)
python-twisted-bin-dbg_17.9.0-2ubuntu0.3_i386.deb (49.8 KiB)
python-twisted-bin-dbg_17.9.0-2ubuntu0.3_ppc64el.deb (51.3 KiB)
python-twisted-bin-dbg_17.9.0-2ubuntu0.3_s390x.deb (54.3 KiB)
python-twisted-bin_17.9.0-2ubuntu0.3_amd64.deb (15.0 KiB)
python-twisted-bin_17.9.0-2ubuntu0.3_arm64.deb (13.8 KiB)
python-twisted-bin_17.9.0-2ubuntu0.3_armhf.deb (14.2 KiB)
python-twisted-bin_17.9.0-2ubuntu0.3_i386.deb (14.4 KiB)
python-twisted-bin_17.9.0-2ubuntu0.3_ppc64el.deb (14.8 KiB)
python-twisted-bin_17.9.0-2ubuntu0.3_s390x.deb (14.9 KiB)
python-twisted-conch_17.9.0-2ubuntu0.3_all.deb (23.6 KiB)
python-twisted-core_17.9.0-2ubuntu0.3_all.deb (1.9 MiB)
python-twisted-mail_17.9.0-2ubuntu0.3_all.deb (18.3 KiB)
python-twisted-names_17.9.0-2ubuntu0.3_all.deb (13.9 KiB)
python-twisted-news_17.9.0-2ubuntu0.3_all.deb (3.2 KiB)
python-twisted-runner-dbg_17.9.0-2ubuntu0.3_all.deb (1.0 KiB)
python-twisted-runner_17.9.0-2ubuntu0.3_all.deb (3.2 KiB)
python-twisted-web_17.9.0-2ubuntu0.3_all.deb (71.0 KiB)
python-twisted-words_17.9.0-2ubuntu0.3_all.deb (14.3 KiB)
python-twisted_17.9.0-2ubuntu0.3_all.deb (3.6 KiB)
python3-twisted-bin-dbg_17.9.0-2ubuntu0.3_amd64.deb (47.4 KiB)
python3-twisted-bin-dbg_17.9.0-2ubuntu0.3_arm64.deb (46.9 KiB)
python3-twisted-bin-dbg_17.9.0-2ubuntu0.3_armhf.deb (45.6 KiB)
python3-twisted-bin-dbg_17.9.0-2ubuntu0.3_i386.deb (45.1 KiB)
python3-twisted-bin-dbg_17.9.0-2ubuntu0.3_ppc64el.deb (47.6 KiB)
python3-twisted-bin-dbg_17.9.0-2ubuntu0.3_s390x.deb (46.6 KiB)
python3-twisted-bin_17.9.0-2ubuntu0.3_amd64.deb (11.2 KiB)
python3-twisted-bin_17.9.0-2ubuntu0.3_arm64.deb (10.6 KiB)
python3-twisted-bin_17.9.0-2ubuntu0.3_armhf.deb (10.6 KiB)
python3-twisted-bin_17.9.0-2ubuntu0.3_i386.deb (11.2 KiB)
python3-twisted-bin_17.9.0-2ubuntu0.3_ppc64el.deb (11.5 KiB)
python3-twisted-bin_17.9.0-2ubuntu0.3_s390x.deb (10.8 KiB)
python3-twisted_17.9.0-2ubuntu0.3_all.deb (1.8 MiB)
twisted-doc_17.9.0-2ubuntu0.3_all.deb (666.7 KiB)
twisted_17.9.0-2ubuntu0.3.debian.tar.xz (45.6 KiB)
twisted_17.9.0-2ubuntu0.3.dsc (3.6 KiB)
twisted_17.9.0.orig.tar.bz2 (2.9 MiB)