Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

Mageia 9: MGASA-2025-0054 critical: python-twisted HTML injection

mageia
Calendar Grey February 12, 2025
Scroller Mageia
Recent python-twisted updates fix significant security issues. Check the advisory for information on the vulnerabilities addressed and the mitigations applied.
Twisted.web has disordered HTTP pipeline response

Summary

Twisted.web has disordered HTTP pipeline response. (CVE-2023-46137) Twisted.web has disordered HTTP pipeline response. (CVE-2024-41671) HTML injection in HTTP redirect body. (CVE-2024-41810)

References

- https://bugs.mageia.org/show_bug.cgi?id=33807

- https://ubuntu.com/security/notices/USN-6575-1

- https://ubuntu.com/security/notices/USN-6988-1

- https://ubuntu.com/security/notices/USN-6988-2

- https://www.cve.org/CVERecord?id=CVE-2023-46137

- https://www.cve.org/CVERecord?id=CVE-2024-41671

- https://www.cve.org/CVERecord?id=CVE-2024-41810

Topics%20covered

Topics Covered

security advisory software update HTML injection Mageia python-twisted HTTP pipeline disordered response

Resolution

SRPMS

- 9/core/python-twisted-22.10.0-2.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 12 Feb 2025
URL: https://advisories.mageia.org/MGASA-2025-0054.html
Type: security
CVE: CVE-2023-46137, CVE-2024-41671, CVE-2024-41810

Topics%20covered

Topics Covered

security advisory software update HTML injection Mageia python-twisted HTTP pipeline disordered response

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.