Format: 1.8 Date: Mon, 21 Mar 2022 21:13:42 +1100 Source: twisted Binary: python3-twisted-bin python3-twisted-bin-dbg Architecture: ppc64el Version: 18.9.0-11ubuntu0.20.04.2 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Ray Veldkamp Description: python3-twisted-bin - Event-based framework for internet applications python3-twisted-bin-dbg - Event-based framework for internet applications (debug extension) Changes: twisted (18.9.0-11ubuntu0.20.04.2) focal-security; urgency=medium . * SECURITY UPDATE: Information disclosure results in leaking of HTTP cookie and authorization headers when following cross origin redirects - debian/patches/CVE-2022-21712-*.patch: Ensure sensitive HTTP headers are removed when forming requests, in src/twisted/web/client.py, src/twisted/web/test/test_agent.py and src/twisted/web/iweb.py. - CVE-2022-21712 . * SECURITY UPDATE: Parsing of SSH version identifier field during an SSH handshake can result in a denial of service when excessively large packets are received - debian/patches/CVE-2022-21716-*.patch: Ensure that length of received handshake buffer is checked, prior to processing version string in src/twisted/conch/ssh/transport.py and src/twisted/conch/test/test_transport.py - CVE-2022-21716 Checksums-Sha1: f3ccf5df272254dfee1ffd03dda65fe0adc022ca 57712 python3-twisted-bin-dbg_18.9.0-11ubuntu0.20.04.2_ppc64el.deb 7b8830e4f902a96461b3351d556538a12be79747 11436 python3-twisted-bin_18.9.0-11ubuntu0.20.04.2_ppc64el.deb 269767e114dfe30d67a31a863ee90a4a85c588f3 7510 twisted_18.9.0-11ubuntu0.20.04.2_ppc64el.buildinfo Checksums-Sha256: 5b824926e48d23e21275bb2ac6884a10e61d7b83def76af42d245ef82013688c 57712 python3-twisted-bin-dbg_18.9.0-11ubuntu0.20.04.2_ppc64el.deb a94879d0fb3ce8e6c8f23a9de7712f7163c2ef9152c6f5ce12702182f600939f 11436 python3-twisted-bin_18.9.0-11ubuntu0.20.04.2_ppc64el.deb 9adb0c3d94f0e183a71cc50c29610f8d3c18752ade01e09d700eefc3a99d24ea 7510 twisted_18.9.0-11ubuntu0.20.04.2_ppc64el.buildinfo Files: d178c7a47d0a6e7b929d49148461aece 57712 debug optional python3-twisted-bin-dbg_18.9.0-11ubuntu0.20.04.2_ppc64el.deb 153719767f613edfcff71f6721a43010 11436 python optional python3-twisted-bin_18.9.0-11ubuntu0.20.04.2_ppc64el.deb a2fec61b63f584c3664dfe8915e609af 7510 python optional twisted_18.9.0-11ubuntu0.20.04.2_ppc64el.buildinfo Original-Maintainer: Debian Python Modules Team