[Git][security-tracker-team/security-tracker][master] 2 commits: Track fixes via unstable for twisted issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 30 16:35:15 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
afd6353e by Salvatore Bonaccorso at 2026-10-30T17:34:53+01:00
Track fixes via unstable for twisted issues
- - - - -
7cb4aa44 by Salvatore Bonaccorso at 2026-10-30T17:34:54+01:00
Update information for CVE-2023-44487 for twisted
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8569,7 +8569,7 @@ CVE-2026-87901 (Improper sanitization in the registration module allows reflecte
CVE-2026-87835 (The Front End Users WordPress plugin through 3.2.35 does not restrict ...)
NOT-FOR-US: WordPress plugin
CVE-2026-83813 (Twisted is an event-based framework for internet applications, support ...)
- - twisted <unfixed> (bug #1151938)
+ - twisted 26.10.0-1 (bug #1151938)
[trixie] - twisted <no-dsa> (Minor issue)
NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-jj36-9pvh-vj5r
NOTE: https://github.com/twisted/twisted/pull/12700
@@ -8768,7 +8768,7 @@ CVE-2026-115885 (The LangGraph CLI is the official command-line interface for La
CVE-2026-115883 (LangGraph checkpoint savers provide Postgres- and SQLite-backed state ...)
NOT-FOR-US: LangGraph
CVE-2026-115877 (Twisted is an event-based framework for internet applications, support ...)
- - twisted <unfixed> (bug #1151938)
+ - twisted 26.10.0-1 (bug #1151938)
[trixie] - twisted <no-dsa> (Minor issue)
NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-q7qq-6mhp-9rc4
NOTE: https://github.com/twisted/twisted/pull/12755
@@ -8808,27 +8808,27 @@ CVE-2026-115786 (A mailbox quota-accounting vulnerability in Zimbra Collaboratio
CVE-2026-115785 (An SMTP command injection vulnerability in the data-source testing fun ...)
NOT-FOR-US: Zimbra
CVE-2026-115778 (Twisted is an event-based framework for internet applications, support ...)
- - twisted <unfixed> (bug #1151938)
+ - twisted 26.10.0-1 (bug #1151938)
[trixie] - twisted <no-dsa> (Minor issue)
NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-cwm5-jh59-mwxr
NOTE: https://github.com/twisted/twisted/pull/12750
NOTE: Fixed by: https://github.com/twisted/twisted/commit/073ba878c6c07d569cb61abc5ae76d46eff1b529 (twisted-26.10.0rc1)
NOTE: Fixed by: https://github.com/twisted/twisted/commit/5d91cc66a3591faba758a80a1479e0103602facc (twisted-26.10.0rc1)
CVE-2026-115776 (Twisted is an event-based framework for internet applications, support ...)
- - twisted <unfixed> (bug #1151938)
+ - twisted 26.10.0-1 (bug #1151938)
[trixie] - twisted <no-dsa> (Minor issue)
NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-53xc-49m8-p798
NOTE: https://github.com/twisted/twisted/pull/12771
NOTE: Fixed by: https://github.com/twisted/twisted/commit/01f8cff7753c1edac132380b2ea939fa6bdbab30 (twisted-26.10.0rc1)
NOTE: Fixed by: https://github.com/twisted/twisted/commit/ac90fb7b0ab73688a581fcd9a7c0577ec8ca3059 (twisted-26.10.0rc1)
CVE-2026-115775 (Twisted is an event-based framework for internet applications, support ...)
- - twisted <unfixed> (bug #1151938)
+ - twisted 26.10.0-1 (bug #1151938)
[trixie] - twisted <no-dsa> (Minor issue)
NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-3476-c5c2-fr73
NOTE: https://github.com/twisted/twisted/pull/12751
NOTE: Fixed by: https://github.com/twisted/twisted/commit/8873814bec8288e2466fad4d2c4d64039beb88b0 (twisted-26.10.0rc1)
CVE-2026-115774 (Twisted is an event-based framework for internet applications, support ...)
- - twisted <unfixed> (bug #1151938)
+ - twisted 26.10.0-1 (bug #1151938)
[trixie] - twisted <no-dsa> (Minor issue)
NOTE: https://github.com/twisted/twisted/security/advisories/GHSA-2qrf-pqgx-qh9v
NOTE: https://github.com/twisted/twisted/pull/12764
@@ -497505,6 +497505,7 @@ CVE-2023-44487 (The HTTP/2 protocol allows a denial of service (server resource
- tomcat9 9.0.70-2
- tomcat10 10.1.14-1
- trafficserver 9.2.3+ds-1 (bug #1053801; bug #1054427)
+ - twisted 26.10.0-1
[experimental] - grpc 1.83.0-1
- grpc <unfixed> (bug #1074421)
[trixie] - grpc <no-dsa> (Minor issue)
@@ -497532,6 +497533,8 @@ CVE-2023-44487 (The HTTP/2 protocol allows a denial of service (server resource
NOTE: ATS: https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
NOTE: ATS: https://github.com/apache/trafficserver/commit/b28ad74f117307e8de206f1de70c3fa716f90682 (9.2.3-rc0)
NOTE: ATS: https://github.com/apache/trafficserver/commit/d742d74039aaa548dda0148ab4ba207906abc620 (8.1.9)
+ NOTE: Twisted: https://github.com/advisories/GHSA-vpp8-g58w-m8mp
+ NOTE: TWisted: Fixed by: https://github.com/twisted/twisted/commit/498939422b69d5a75c4b8f81fa7926423dac534d (twisted-26.10.0rc1)
NOTE: grpc: https://github.com/grpc/grpc/pull/34763
NOTE: h2o: https://github.com/h2o/h2o/commit/28fe15117b909588bf14269a0e1c6ec4548579fe
NOTE: dnsdist: h2o change breaks the ABI, hence dnsdist switched to a vendored fix in 1.8.2-2
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5d8394a2749a49612a9912a531f273599ce81094...7cb4aa441d088fab73890ca5248ffaa99e732440
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5d8394a2749a49612a9912a531f273599ce81094...7cb4aa441d088fab73890ca5248ffaa99e732440
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/6b1a5acb/attachment.htm>
More information about the debian-security-tracker-commits
mailing list