Information on source package twisted

Available versions

ReleaseVersion
jessie14.0.2-3
jessie (security)14.0.2-3+deb8u2
stretch16.6.0-2
buster18.9.0-3
bullseye18.9.0-10
sid18.9.0-11

Open issues

BugjessiestretchbusterbullseyesidDescription
CVE-2020-10109fixedvulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Twisted Web through 19.10.0, there was an HTTP request splitting vu ...
CVE-2020-10108fixedvulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Twisted Web through 19.10.0, there was an HTTP request splitting vu ...
CVE-2019-12855vulnerable (no DSA)vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP su ...
CVE-2019-12387vulnerable (no DSA)vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn Twisted before 19.2.1, twisted.web did not validate or sanitize URI ...

Open unimportant issues

BugjessiestretchbusterbullseyesidDescription
CVE-2016-1000111vulnerablefixedfixedfixedfixedTwisted before 16.3.1 does not attempt to address RFC 3875 section 4.1 ...

Resolved issues

BugDescription
CVE-2014-7143Python Twisted 14.0 trustRoot is not respected in HTTP client ...

Security announcements

DSA / DLADescription
DLA-2145-2twisted - regression update
DLA-2145-1twisted - security update

Search for package or bug name: Reporting problems