Skip to content
OpenAdvisories
High ELSA-2022-4930 1 CVE

Important: python-twisted-web security update (Oracle Linux 7)

Published Jun 8, 2022 · Updated Jun 8, 2022

Ecosystem: Oracle Linux

Summary

[12.1.0-8]
- Security fix for CVE-2022-24801: Possible http request smuggling
Resolves: rhbz#2073114

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 python-twisted-web 0:12.1.0-8.el7_9

Vulnerabilities 1

  • High 8.1
    CVE-2022-24801

    HTTP Request Smuggling in twisted.web

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to version 22.4.0rc1, the Twisted Web HTTP 1.1 server, located in the `twisted.web.http` module, parsed several HTTP request constructs more leniently than permitted …

    twisted twisted twisted twisted Debian Ubuntu Alpine PyPI