[SECURITY] [DLA 2145-2] twisted security update

2020-03-1917:13:20

lists.debian.org

JSON

Package : twisted
Version : 14.0.2-3+deb8u2
CVE IDs : CVE-2020-10108 CVE-2020-10109
Debian Bug : #953950

It was discovered that there were was a regression introduced in
DLA-2145-1 due to the incorrect application of the upstream patch for
CVE-2020-10108 & CVE-2020-10109 regarding a number of HTTP request
splitting vulnerabilities in Twisted, an Python event-based framework
for building various types of internet applications.

Thanks to Etienne Allovon for the detailed report.

For Debian 8 "Jessie", these issues have been fixed in twisted
version 14.0.2-3+deb8u2.

We recommend that you upgrade your twisted packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian8armelpython-twisted-runner< 14.0.2-3+deb8u2python-twisted-runner_14.0.2-3+deb8u2_armel.deb
Debian8armelpython-twisted-bin-dbg< 14.0.2-3+deb8u2python-twisted-bin-dbg_14.0.2-3+deb8u2_armel.deb
Debian8allpython-twisted-core< 14.0.2-3+deb8u2python-twisted-core_14.0.2-3+deb8u2_all.deb
Debian8allpython-twisted-conch< 1:14.0.2-3+deb8u2python-twisted-conch_1:14.0.2-3+deb8u2_all.deb
Debian8amd64python-twisted-runner-dbg< 14.0.2-3+deb8u2python-twisted-runner-dbg_14.0.2-3+deb8u2_amd64.deb
Debian8armhfpython-twisted-runner< 14.0.2-3+deb8u2python-twisted-runner_14.0.2-3+deb8u2_armhf.deb
Debian8alltwisted-doc< 14.0.2-3+deb8u2twisted-doc_14.0.2-3+deb8u2_all.deb
Debian8amd64python-twisted-bin< 14.0.2-3+deb8u2python-twisted-bin_14.0.2-3+deb8u2_amd64.deb
Debian8armhfpython-twisted-bin< 14.0.2-3+deb8u2python-twisted-bin_14.0.2-3+deb8u2_armhf.deb
Debian8allpython-twisted-web< 14.0.2-3+deb8u2python-twisted-web_14.0.2-3+deb8u2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	armel	python-twisted-runner	< 14.0.2-3+deb8u2	python-twisted-runner_14.0.2-3+deb8u2_armel.deb
Debian	8	armel	python-twisted-bin-dbg	< 14.0.2-3+deb8u2	python-twisted-bin-dbg_14.0.2-3+deb8u2_armel.deb
Debian	8	all	python-twisted-core	< 14.0.2-3+deb8u2	python-twisted-core_14.0.2-3+deb8u2_all.deb
Debian	8	all	python-twisted-conch	< 1:14.0.2-3+deb8u2	python-twisted-conch_1:14.0.2-3+deb8u2_all.deb
Debian	8	amd64	python-twisted-runner-dbg	< 14.0.2-3+deb8u2	python-twisted-runner-dbg_14.0.2-3+deb8u2_amd64.deb
Debian	8	armhf	python-twisted-runner	< 14.0.2-3+deb8u2	python-twisted-runner_14.0.2-3+deb8u2_armhf.deb
Debian	8	all	twisted-doc	< 14.0.2-3+deb8u2	twisted-doc_14.0.2-3+deb8u2_all.deb
Debian	8	amd64	python-twisted-bin	< 14.0.2-3+deb8u2	python-twisted-bin_14.0.2-3+deb8u2_amd64.deb
Debian	8	armhf	python-twisted-bin	< 14.0.2-3+deb8u2	python-twisted-bin_14.0.2-3+deb8u2_armhf.deb
Debian	8	all	python-twisted-web	< 14.0.2-3+deb8u2	python-twisted-web_14.0.2-3+deb8u2_all.deb