Format: 1.8 Date: Mon, 21 Mar 2022 21:13:42 +1100 Source: twisted Binary: python3-twisted python3-twisted-bin python3-twisted-bin-dbg twisted-doc Architecture: amd64 all Version: 18.9.0-11ubuntu0.20.04.2 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Ray Veldkamp Description: python3-twisted - Event-based framework for internet applications python3-twisted-bin - Event-based framework for internet applications python3-twisted-bin-dbg - Event-based framework for internet applications (debug extension) twisted-doc - Official documentation of Twisted Changes: twisted (18.9.0-11ubuntu0.20.04.2) focal-security; urgency=medium . * SECURITY UPDATE: Information disclosure results in leaking of HTTP cookie and authorization headers when following cross origin redirects - debian/patches/CVE-2022-21712-*.patch: Ensure sensitive HTTP headers are removed when forming requests, in src/twisted/web/client.py, src/twisted/web/test/test_agent.py and src/twisted/web/iweb.py. - CVE-2022-21712 . * SECURITY UPDATE: Parsing of SSH version identifier field during an SSH handshake can result in a denial of service when excessively large packets are received - debian/patches/CVE-2022-21716-*.patch: Ensure that length of received handshake buffer is checked, prior to processing version string in src/twisted/conch/ssh/transport.py and src/twisted/conch/test/test_transport.py - CVE-2022-21716 Checksums-Sha1: 731a977c0e5c13f901ff52c044566caf523d6fa0 57424 python3-twisted-bin-dbg_18.9.0-11ubuntu0.20.04.2_amd64.deb f11cd135f5d3414abbf51c6c8da6a957d6f35ca0 11404 python3-twisted-bin_18.9.0-11ubuntu0.20.04.2_amd64.deb a90df9ce91d0d1c1cc2a20440dfec3aa42b64c08 1933148 python3-twisted_18.9.0-11ubuntu0.20.04.2_all.deb 08beb975d7927a09495040ea5af4ddaeb3670402 1111788 twisted-doc_18.9.0-11ubuntu0.20.04.2_all.deb ada57df5dbc172cd9afbf854643ea2b4bdfad304 8959 twisted_18.9.0-11ubuntu0.20.04.2_amd64.buildinfo Checksums-Sha256: 429955f54da7c42bdf4c82a7205427ab28cd7afbb9b3f3d7d2a9ec9a81844c00 57424 python3-twisted-bin-dbg_18.9.0-11ubuntu0.20.04.2_amd64.deb b61f34d10b799ce652ffbbe803ceb7f9e39169bea92a4efd39c5bc3d7810c7d6 11404 python3-twisted-bin_18.9.0-11ubuntu0.20.04.2_amd64.deb 2664522fc2042265f904fbecb39d461b6f5781b7810b6fed600b905804a77f7d 1933148 python3-twisted_18.9.0-11ubuntu0.20.04.2_all.deb c02ab71cbdf8c22844c5ad6933e4dc503b44a5e8e75b5b3fb7984e41e4f3cbf3 1111788 twisted-doc_18.9.0-11ubuntu0.20.04.2_all.deb 9c2c38258e1cf674c4d3e6f3820edae1c4cbc0d7005759559b0335ce70bf2447 8959 twisted_18.9.0-11ubuntu0.20.04.2_amd64.buildinfo Files: 6111fabdb3be306d096c867887f20659 57424 debug optional python3-twisted-bin-dbg_18.9.0-11ubuntu0.20.04.2_amd64.deb 77420b431e606d290cb35e744502bae5 11404 python optional python3-twisted-bin_18.9.0-11ubuntu0.20.04.2_amd64.deb c91f5f619485e61bb0f2efd954f2802e 1933148 python optional python3-twisted_18.9.0-11ubuntu0.20.04.2_all.deb e3b4c2261e26c76a70204c7e591c77a6 1111788 doc optional twisted-doc_18.9.0-11ubuntu0.20.04.2_all.deb 3ed6f21037f1224f947db471311653f2 8959 python optional twisted_18.9.0-11ubuntu0.20.04.2_amd64.buildinfo Original-Maintainer: Debian Python Modules Team