Ubuntu 21.10, 20.04 LTS: USN-5354-1 Moderate Twisted Security Issues

ubuntu

March 30, 2022

Several security issues were fixed in Twisted.

Summary

Several security issues were fixed in Twisted.

Software Description:

- twisted: Event-based framework for internet applications

Details:

It was discovered that Twisted incorrectly filtered HTTP headers when

clients are being redirected to another origin. A remote attacker could

use this issue to obtain sensitive information. (CVE-2022-21712)

It was discovered that Twisted incorrectly processed SSH handshake data

on connection establishments. A remote attacker could use this issue to

cause Twisted to crash, resulting in a denial of service. (CVE-2022-21716)

Topics Covered

security advisory denial of service security issue critical update ubuntu http header twisted

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
python3-twisted 20.3.0-7ubuntu1.1
python3-twisted-bin 20.3.0-7ubuntu1.1

Ubuntu 20.04 LTS:
python3-twisted 18.9.0-11ubuntu0.20.04.2
python3-twisted-bin 18.9.0-11ubuntu0.20.04.2

Ubuntu 18.04 LTS:
python-twisted 17.9.0-2ubuntu0.3
python-twisted-bin 17.9.0-2ubuntu0.3
python3-twisted 17.9.0-2ubuntu0.3
python3-twisted-bin 17.9.0-2ubuntu0.3

In general, a standard system update will make all the necessary changes.