Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Mageia 7: MGASA-2019-0360 Moderate: Python-Twisted Security Flaws

mageia
Calendar Grey December 6, 2019
Dist Mageia Esm H88
Recent enhancements in python-twisted libraries address URI validation concerns, effectively mitigating risks associated with CRLF and man-in-the-middle threats.
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks (CVE-2019-12387)

Summary

Updated python-twisted packages fix security vulnerabilities:
Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks (CVE-2019-12387).
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections (CVE-2019-12855).

References

- https://bugs.mageia.org/show_bug.cgi?id=25752

- - - https://www.cve.org/CVERecord?id=CVE-2019-12387

- https://www.cve.org/CVERecord?id=CVE-2019-12855

Topics%20covered

Topics Covered

security advisory security issue MITM attack Mageia CRLF attack python-twisted level moderate

Resolution

SRPMS

- 7/core/python-twisted-19.2.1-1.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0360.html
Type: security
CVE: CVE-2019-12387, CVE-2019-12855

Topics%20covered

Topics Covered

security advisory security issue MITM attack Mageia CRLF attack python-twisted level moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here