Skip to content
OpenAdvisories
High ELSA-2016-1978 1 CVE

Important: python-twisted-web security update (Oracle Linux 7)

Published Sep 29, 2016 · Updated Sep 29, 2016

Ecosystem: Oracle Linux

Summary

[8.2.0-5]
- Rebase HTTPoxy patch and bump release for rebuild
Resolves: rhbz#1358789

[8.2.0-4]
- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358789

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 python-twisted-web 0:12.1.0-5.el7_2

Vulnerabilities 1

  • Medium 5.3
    CVE-2016-1000111

    Forced Browsing in Twisted

    Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers…

    twisted twisted twisted py3-twisted Debian Ubuntu Alpine PyPI