Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 482
Alerts This Week
Warning Icon 1 482

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 dnsx Update Addresses Critical DoS Cross-Site Scripting Issues

Calendar White Jul 20, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 OpenSSH Significant Update for Remote File Misplacement Issue

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 freerdp Important Update Notification 2026-fa672d26a8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 mingw-python-idna Critical DoS Risk Update 2026-9dbf4d0ca8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mingw-python-pip Critical Path Traversal Risk Advisory

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 c-ares Critical Use-After-Free Bug Fix FEDORA-2026-d70d93fcd7

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 9 articles for you...
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorymoderatedenial of service

Ubuntu 26.04 Twisted Moderate Denial of Service Vulnerability USN-8380-1

Twisted could be made to crash if it received specially crafted network traffic.. ========================================================================== Ubuntu Security Notice USN-8380-1 June 03, 2026 twisted vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Twisted could be made to crash if it received specially crafted network traffic. Software Description: - twisted: Event-based framework for internet applications Details: It was discovered that Twisted incorrectly handled DNS name decompression. A remote attacker could possibly use this issue to cause Twisted to consume excessive resources, leading to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS python3-twisted 25.5.0-5ubuntu0.1 Ubuntu 25.10 python3-twisted 24.11.0-1ubuntu0.1 Ubuntu 24.04 LTS python3-twisted 24.3.0-1ubuntu0.2 Ubuntu 22.04 LTS python3-twisted 22.1.0-2ubuntu2.7 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8380-1 CVE-2026-42304 Package Information: https://launchpad.net/ubuntu/+source/twisted/25.5.0-5ubuntu0.1 https://launchpad.net/ubuntu/+source/twisted/24.11.0-1ubuntu0.1 https://launchpad.net/ubuntu/+source/twisted/24.3.0-1ubuntu0.2 https://launchpad.net/ubuntu/+source/twisted/22.1.0-2ubuntu2.7 . Twisted can crash from crafted network traffic on Ubuntu. Updates available for multiple versions. Patch now.. Twisted update, Ubuntu security, denial of service patch. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 03, 2026 •moderate Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of servicecritical

Ubuntu Twisted Critical Denial of Service Vulnerability USN-8380-1

Twisted could be made to crash if it received specially crafted network traffic.. ========================================================================== Ubuntu Security Notice USN-8380-1 June 03, 2026 twisted vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Twisted could be made to crash if it received specially crafted network traffic. Software Description: - twisted: Event-based framework for internet applications Details: It was discovered that Twisted incorrectly handled DNS name decompression. A remote attacker could possibly use this issue to cause Twisted to consume excessive resources, leading to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS python3-twisted 25.5.0-5ubuntu0.1 Ubuntu 25.10 python3-twisted 24.11.0-1ubuntu0.1 Ubuntu 24.04 LTS python3-twisted 24.3.0-1ubuntu0.2 Ubuntu 22.04 LTS python3-twisted 22.1.0-2ubuntu2.7 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8380-1 CVE-2026-42304 Package Information: https://launchpad.net/ubuntu/+source/twisted/25.5.0-5ubuntu0.1 https://launchpad.net/ubuntu/+source/twisted/24.11.0-1ubuntu0.1 https://launchpad.net/ubuntu/+source/twisted/24.3.0-1ubuntu0.2 https://launchpad.net/ubuntu/+source/twisted/22.1.0-2ubuntu2.7 . Twisted's security flaw in Ubuntu could lead to a denial of service. Update to secure your system against potential crashes.. Ubuntu Security Update, Twisted Denial of Service, Critical Twisted Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 03, 2026 •Critical Ubuntu
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisoryDebiancross-site scripting

Debian LTS DLA-3970-1: twisted security issues and updates

Multiple security issues were found in Twisted, an event-based framework for internet applications, which could result in incorrect ordering of HTTP requests or cross-site scripting. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3970-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Sylvain Beucler November 28, 2024 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : twisted Version : 20.3.0-7+deb11u2 CVE ID : CVE-2022-39348 CVE-2023-46137 CVE-2024-41671 CVE-2024-41810 Debian Bug : 1023359 1054913 1077679 1077680 Multiple security issues were found in Twisted, an event-based framework for internet applications, which could result in incorrect ordering of HTTP requests or cross-site scripting. CVE-2022-39348 When the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. In practice this should be very difficult to exploit as being able to modify the Host header of a normal HTTP request implies that one is already in a privileged position. CVE-2023-46137 When sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. CVE-2024-41671 The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. CVE-2024-41810 The `twisted.web.util.redirectTo` function contains an HTML injectionvulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. For Debian 11 bullseye, these problems have been fixed in version 20.3.0-7+deb11u2. We recommend that you upgrade your twisted packages. For the detailed security status of twisted please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/twisted Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu Security Notice USN-5185-1 addresses critical vulnerabilities patched in 21.04-3ubuntu2.. twisted security, Debian updates, HTTP request issues, cross-site scripting, open source security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 28, 2024 •Important Debian LTS
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryubuntunetwork threat

Ubuntu 22.04 LTS USN-6988-2 critical: twisted network access

Twisted could allow unintended access to information over the network.. ========================================================================== Ubuntu Security Notice USN-6988-2 November 26, 2024 twisted vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Twisted could allow unintended access to information over the network. Software Description: - twisted: Event-based framework for internet applications Details: USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the equivalent fix for Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Ben Kallus discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to delay and manipulate responses. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-41671) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS python3-twisted 22.1.0-2ubuntu2.6 Ubuntu 20.04 LTS python3-twisted 18.9.0-11ubuntu0.20.04.5 Ubuntu 18.04 LTS python-twisted 17.9.0-2ubuntu0.3+esm2 Available with Ubuntu Pro python3-twisted 17.9.0-2ubuntu0.3+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6988-2 https://ubuntu.com/security/notices/USN-6988-1 CVE-2024-41671 PackageInformation: https://launchpad.net/ubuntu/+source/twisted/22.1.0-2ubuntu2.6 https://launchpad.net/ubuntu/+source/twisted/18.9.0-11ubuntu0.20.04.5 . Utilizing Twisted in Ubuntu carries a potential danger of inadvertent data exposure across the network. Security patching recommended.. twisted, Ubuntu, information access, security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 26, 2024 •Critical Ubuntu
Banner 3 1028x280 1708121785 1771599793
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisoryXSSremote attack

Ubuntu 24.04 LTS Advisory USN-6988-1: Twisted XSS Attack

Several security issues were fixed in Twisted.. ========================================================================== Ubuntu Security Notice USN-6988-1 September 04, 2024 twisted vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Twisted. Software Description: - twisted: Event-based framework for internet applications Details: It was discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to delay and manipulate responses. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-41671) It was discovered that Twisted did not properly sanitize certain input. An attacker could use this vulnerability to possibly execute an HTML injection leading to a cross-site scripting (XSS) attack. (CVE-2024-41810) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-twisted 24.3.0-1ubuntu0.1 Ubuntu 22.04 LTS python3-twisted 22.1.0-2ubuntu2.5 Ubuntu 20.04 LTS python3-twisted 18.9.0-11ubuntu0.20.04.4 Ubuntu 18.04 LTS python-twisted 17.9.0-2ubuntu0.3+esm1 Available with Ubuntu Pro python3-twisted 17.9.0-2ubuntu0.3+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS python-twisted 16.0.0-1ubuntu0.4+esm2 Available with Ubuntu Pro python3-twisted 16.0.0-1ubuntu0.4+esm2 Available with Ubuntu Pro Ubuntu 14.04 LTS python-twisted 13.2.0-1ubuntu1.2+esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6988-1 CVE-2024-41671, CVE-2024-41810 Package Information: https://launchpad.net/ubuntu/+source/twisted/24.3.0-1ubuntu0.1 https://launchpad.net/ubuntu/+source/twisted/22.1.0-2ubuntu2.5 https://launchpad.net/ubuntu/+source/twisted/18.9.0-11ubuntu0.20.04.4 . Intricate security bulletin revisions for Ubuntu dealing with urgent risks and weaknesses recorded on October 02, 2024.. Ubuntu Updates, Twisted Framework, Security Threats, Cross-Site Scripting. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 04, 2024 •Critical Ubuntu
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorycriticalubuntu

Ubuntu 23.10: USN-6575-1 Critical Twisted HTML Injection

Several security issues were fixed in Twisted.. ========================================================================== Ubuntu Security Notice USN-6575-1 January 10, 2024 twisted vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 23.04 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Twisted. Software Description: - twisted: Event-based framework for internet applications Details: It was discovered that Twisted incorrectly escaped host headers in certain 404 responses. A remote attacker could possibly use this issue to perform HTML and script injection attacks. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-39348) It was discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to delay responses and manipulate the responses of second requests. (CVE-2023-46137) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: python3-twisted 22.4.0-4ubuntu0.23.10.1 Ubuntu 23.04: python3-twisted 22.4.0-4ubuntu0.23.04.1 Ubuntu 22.04 LTS: python3-twisted 22.1.0-2ubuntu2.4 Ubuntu 20.04 LTS: python3-twisted 18.9.0-11ubuntu0.20.04.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6575-1 CVE-2022-39348, CVE-2023-46137 Package Information: https://launchpad.net/ubuntu/+source/twisted/22.4.0-4ubuntu0.23.10.1 https://launchpad.net/ubuntu/+source/twisted/22.4.0-4ubuntu0.23.04.1 https://launchpad.net/ubuntu/+source/twisted/22.1.0-2ubuntu2.4 https://launchpad.net/ubuntu/+source/twisted/18.9.0-11ubuntu0.20.04.3 . Several securityissues fixed in Twisted for Ubuntu address critical HTML injection and response manipulation threats.. Twisted vulnerabilities, Ubuntu security, response manipulation. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 10, 2024 •Critical Ubuntu
Banner 3 1028x280 1708121785 1771599793
91
Ls Advisories Gentoo Esm H240
Price Tag%201security advisorydenial of servicegentoo

Gentoo: GLSA-202301-02 Low Severity: Twisted Denial Of Service Threat

Multiple vulnerabilities have been discovered in Twisted, the worst of which could result in denial of service.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202301-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: Twisted: Multiple Vulnerabilities Date: January 11, 2023 Bugs: #878499, #834542, #832875 ID: 202301-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been discovered in Twisted, the worst of which could result in denial of service. Background ========= Twisted is an asynchronous networking framework written in Python. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-python/twisted < 22.10.0 > = 22.10.0 Description ========== Multiple vulnerabilities have been discovered in Twisted. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All Twisted users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-python/twisted-22.10.0" References ========= [ 1 ] CVE-2022-21712 https://nvd.nist.gov/vuln/detail/CVE-2022-21712 [ 2 ] CVE-2022-21716 https://nvd.nist.gov/vuln/detail/CVE-2022-21716 [ 3 ] CVE-2022-39348 https://nvd.nist.gov/vuln/detail/CVE-2022-39348 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo SecurityWebsite: https://security.gentoo.org/glsa/202301-02 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2023 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Gentoo Linux released security advisory GLSA 202301-02, tackling multiple vulnerabilities in Twisted. Review the details to safeguard your systems from risks. gentoo,tangled security,service threat,denial update,security issues. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jan 11, 2023 •Low Gentoo
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebiancritical threat

Debian 10 Buster DLA-3212-1 Critical: Twisted HTML Injection Issue

It was discovered that twisted, a framework for internet applications written in Python, was prone to an HTML injection when displaying the HTTP Host header in an error page. . -------------------------------------------------------------------------Debian LTS Advisory DLA-3212-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Dominik George November 28, 2022 https://wiki.debian.org/LTS -------------------------------------------------------------------------Package : twisted Version : 18.9.0-3+deb10u2 CVE ID : CVE-2022-39348 Debian Bug : It was discovered that twisted, a framework for internet applications written in Python, was prone to an HTML injection when displaying the HTTP Host header in an error page. For Debian 10 buster, this problem has been fixed in version 18.9.0-3+deb10u2. We recommend that you upgrade your twisted packages. For the detailed security status of twisted please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/twisted Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Explore the latest Debian Long Term Support notification regarding twisted, emphasizing an HTML injection vulnerability present in Python applications and the recommended updates.. Twisted Framework, Debian LTS, HTML Injection Fix, Security Advisory, Python Applications. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 28, 2022 •Critical Debian LTS
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics