PT-2019-7137 · Python · Python Twisted

Name of the Vulnerable Software and Affected Versions: Python Twisted version 14.0 Description: The issue concerns the trustRoot in the HTTP client of Python Twisted, which is not respected. This means that the trust root, which is supposed to define the trusted certificate authorities, is not...

CVE-2019-12855

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2453-1)

This update for python-Twisted fixes the following issues : Security issue fixed : CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2019:2453-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461...

OPENSUSE-SU-2019:2110-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the...

Security update for python-Twisted (moderate)

openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2019:2110-1 Rating: moderate References: 1138461 Cross-References: CVE-2019-12855 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This updat...

openSUSE: Security Advisory for python-Twisted (openSUSE-SU-2019:2068-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : python-Twisted (openSUSE-2019-2068)

This update for python-Twisted fixes the following issues : Security issue fixed : - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The...

OPENSUSE-SU-2019:2068-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. This update was imported from the SUSE:SLE-15:Update update project...

Security update for python-Twisted (moderate)

openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2019:2068-1 Rating: moderate References: 1138461 Cross-References: CVE-2019-12855 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description...

SUSE SLED15 / SLES15 Security Update : python-Twisted (SUSE-SU-2019:2212-1)

This update for python-Twisted fixes the following issues : Security issue fixed : CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2019:2212-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461...

Improper Certificate Validation in Twisted

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

GHSA-65RM-H285-5CC5 Improper Certificate Validation in Twisted

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

[SECURITY] Fedora 30 Update: python-twisted-19.2.1-3.fc30

Twisted is a networking engine written in Python, supporting numerous proto cols. It contains a web server, numerous chat clients, chat servers, mail servers and more...

Fedora 30 : python-twisted (2019-d480909528)

Security fix for CVE-2019-12855. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora Update for python-twisted FEDORA-2019-d480909528

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-9512

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU,...

SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2066-1)

This update for python-Twisted fixes the following issue : Security issue fixed : CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. Note that Tenable Network Security has extracted the preceding description block...