Updated python-twisted packages fix security vulnerabilities

Jake Miller and ZeddYu Lu discovered that Twisted incorrectly handled certain content-length headers. A remote attacker could possibly use this issue to perform HTTP request splitting attacks CVE-2020-10108, CVE-2020-10109...

NewStart CGSL MAIN 4.05 : python-twisted-web Vulnerability (NS-SA-2020-0054)

The remote NewStart CGSL host, running version MAIN 4.05, has python-twisted-web packages installed that are affected by a vulnerability: - In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first heade...

Twisted: Access restriction bypasses

Background Twisted is an asynchronous networking framework written in Python. Description Multiple vulnerabilities have been discovered in Twisted. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is ...

GLSA-202007-24 : Twisted: Access restriction bypasses

The remote host is affected by the vulnerability described in GLSA-202007-24 Twisted: Access restriction bypasses Multiple vulnerabilities have been discovered in Twisted. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

Photon OS 2.0: Python PHSA-2020-2.0-0260

An update of the python package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0260. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13851...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0307

An update of 'python-Twisted' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2020-0307

Updates of 'python-Twisted' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0260

An update of 'python-Twisted' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2020-0260

Updates of 'python-Twisted' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2020-0109

Updates of 'python-Twisted' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0259

An update of 'python-Twisted', 'dbus' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2020-0259

Updates of 'dbus', 'python-Twisted' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2020-3.0-0109

Updates of 'python-Twisted' packages of Photon OS have been released...

The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

Amazon Linux AMI : python-twisted-web (ALAS-2020-1372)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1372 advisory. In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set ...

Important: python-twisted-web

Issue Overview: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined...

Amazon Linux 2 : python-twisted-web (ALAS-2020-1428)

The version of python-twisted-web installed on the remote host is prior to 12.1.0-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1428 advisory. In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a...

Important: python-twisted-web

Issue Overview: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request. CVE-2020-10109 In...

CentOS: Security Advisory for python-twisted-web (CESA-2020:1561)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for python-twisted-web (CESA-2020:1962)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...