Advisories » MGASA-2025-0054

Updated python-twisted packages fix security vulnerabilities

Publication date: 12 Feb 2025
Modification date: 12 Feb 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2023-46137 , CVE-2024-41671 , CVE-2024-41810

Description

Twisted.web has disordered HTTP pipeline response. (CVE-2023-46137)
Twisted.web has disordered HTTP pipeline response. (CVE-2024-41671)
HTML injection in HTTP redirect body. (CVE-2024-41810)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33807
• https://ubuntu.com/security/notices/USN-6575-1
• https://ubuntu.com/security/notices/USN-6988-1
• https://ubuntu.com/security/notices/USN-6988-2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46137
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41671
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41810

SRPMS

9/core

• python-twisted-22.10.0-2.1.mga9