Publishing details

Published on 2020-03-19
Copied from ubuntu xenial in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

twisted (16.0.0-1ubuntu0.4) xenial-security; urgency=medium

  * SECURITY UPDATE: incorrect URI and HTTP method validation
    - debian/patches/CVE-2019-12387.patch: prevent CRLF injections in
      twisted/web/_newclient.py, twisted/web/client.py,
      twisted/web/test/injectionhelpers.py,
      twisted/web/test/test_agent.py,
      twisted/web/test/test_webclient.py.
    - CVE-2019-12387
  * SECURITY UPDATE: incorrect cert validation in XMPP support
    - debian/patches/CVE-2019-12855-*.patch: upstream patches to implement
      certificate checking.
    - CVE-2019-12855
  * SECURITY UPDATE: request smuggling attacks
    - debian/patches/CVE-2020-1010x-pre1.patch: refactor to reduce
      duplication in twisted/web/test/test_http.py.
    - debian/patches/CVE-2020-1010x.patch: fix several request smuggling
      attacks in twisted/web/http.py,
      twisted/web/test/test_http.py.
    - CVE-2020-10108
    - CVE-2020-10109

 -- Marc Deslauriers <email address hidden>  Thu, 19 Mar 2020 08:04:26 -0400

Available diffs

diff from 16.0.0-1ubuntu0.2 (in ~ubuntu-security/ubuntu/ppa) to 16.0.0-1ubuntu0.4 (17.1 KiB)
diff from 16.0.0-1ubuntu0.3 to 16.0.0-1ubuntu0.4 (1.3 KiB)

Builds

Built packages

python-twisted Event-based framework for internet applications (dependency package)

python-twisted-bin Event-based framework for internet applications

python-twisted-bin-dbg Event-based framework for internet applications (debug extension)

python-twisted-conch twisted dummy package for Twisted SSH Implementation

python-twisted-core Event-based framework for internet applications

python-twisted-mail twisted dummy package for SMTP, IMAP and POP protocol implementation

python-twisted-names twisted package for DNS protocol implementation

python-twisted-news twisted dummy package for NNTP protocol implementation

python-twisted-runner twisted dummy package for process management

python-twisted-runner-dbg twisted dummy package for process management

python-twisted-web twisted dummy package for HTTP protocol implementation

python-twisted-words twisted dummy package for Chat and Instant Messaging

python3-twisted Event-based framework for internet applications

twisted-doc Official documentation of Twisted

Package files

python-twisted-bin-dbg_16.0.0-1ubuntu0.4_amd64.deb (37.5 KiB)
python-twisted-bin-dbg_16.0.0-1ubuntu0.4_arm64.deb (37.1 KiB)
python-twisted-bin-dbg_16.0.0-1ubuntu0.4_armhf.deb (38.2 KiB)
python-twisted-bin-dbg_16.0.0-1ubuntu0.4_i386.deb (36.2 KiB)
python-twisted-bin-dbg_16.0.0-1ubuntu0.4_powerpc.deb (36.8 KiB)
python-twisted-bin-dbg_16.0.0-1ubuntu0.4_ppc64el.deb (37.9 KiB)
python-twisted-bin-dbg_16.0.0-1ubuntu0.4_s390x.deb (35.6 KiB)
python-twisted-bin_16.0.0-1ubuntu0.4_amd64.deb (12.7 KiB)
python-twisted-bin_16.0.0-1ubuntu0.4_arm64.deb (11.8 KiB)
python-twisted-bin_16.0.0-1ubuntu0.4_armhf.deb (11.7 KiB)
python-twisted-bin_16.0.0-1ubuntu0.4_i386.deb (12.7 KiB)
python-twisted-bin_16.0.0-1ubuntu0.4_powerpc.deb (11.9 KiB)
python-twisted-bin_16.0.0-1ubuntu0.4_ppc64el.deb (12.3 KiB)
python-twisted-bin_16.0.0-1ubuntu0.4_s390x.deb (12.2 KiB)
python-twisted-conch_16.0.0-1ubuntu0.4_all.deb (21.5 KiB)
python-twisted-core_16.0.0-1ubuntu0.4_all.deb (1.9 MiB)
python-twisted-mail_16.0.0-1ubuntu0.4_all.deb (19.0 KiB)
python-twisted-names_16.0.0-1ubuntu0.4_all.deb (18.1 KiB)
python-twisted-news_16.0.0-1ubuntu0.4_all.deb (4.2 KiB)
python-twisted-runner-dbg_16.0.0-1ubuntu0.4_amd64.deb (930 bytes)
python-twisted-runner-dbg_16.0.0-1ubuntu0.4_arm64.deb (930 bytes)
python-twisted-runner-dbg_16.0.0-1ubuntu0.4_armhf.deb (930 bytes)
python-twisted-runner-dbg_16.0.0-1ubuntu0.4_i386.deb (928 bytes)
python-twisted-runner-dbg_16.0.0-1ubuntu0.4_powerpc.deb (930 bytes)
python-twisted-runner-dbg_16.0.0-1ubuntu0.4_ppc64el.deb (930 bytes)
python-twisted-runner-dbg_16.0.0-1ubuntu0.4_s390x.deb (932 bytes)
python-twisted-runner_16.0.0-1ubuntu0.4_amd64.deb (5.3 KiB)
python-twisted-runner_16.0.0-1ubuntu0.4_arm64.deb (5.3 KiB)
python-twisted-runner_16.0.0-1ubuntu0.4_armhf.deb (5.3 KiB)
python-twisted-runner_16.0.0-1ubuntu0.4_i386.deb (5.3 KiB)
python-twisted-runner_16.0.0-1ubuntu0.4_powerpc.deb (5.3 KiB)
python-twisted-runner_16.0.0-1ubuntu0.4_ppc64el.deb (5.3 KiB)
python-twisted-runner_16.0.0-1ubuntu0.4_s390x.deb (5.3 KiB)
python-twisted-web_16.0.0-1ubuntu0.4_all.deb (73.3 KiB)
python-twisted-words_16.0.0-1ubuntu0.4_all.deb (16.9 KiB)
python-twisted_16.0.0-1ubuntu0.4_all.deb (3.5 KiB)
python3-twisted_16.0.0-1ubuntu0.4_all.deb (1.1 MiB)
twisted-doc_16.0.0-1ubuntu0.4_all.deb (4.5 KiB)
twisted_16.0.0-1ubuntu0.4.debian.tar.xz (32.4 KiB)
twisted_16.0.0-1ubuntu0.4.dsc (2.9 KiB)
twisted_16.0.0.orig.tar.bz2 (3.0 MiB)