Package "twisted-doc"
| Name: |
twisted-doc
|
Description: |
Official documentation of Twisted
|
| Latest version: |
25.5.0-5ubuntu0.2 |
| Release: |
resolute (26.04) |
| Level: |
security |
| Repository: |
main |
| Head package: |
twisted |
| Homepage: |
https://twistedmatrix.com/ |
Links
Download "twisted-doc"
Other versions of "twisted-doc" in Resolute
Changelog
|
twisted (25.5.0-5ubuntu0.2) resolute-security; urgency=medium
* SECURITY UPDATE: DoS in wildcardToRegexp()
- debian/patches/CVE-2026-106454-1.patch: add a type annotation since we're
about to make changes in src/twisted/mail/imap4.py.
- debian/patches/CVE-2026-106454-2.patch: make it pass by escaping
everything else in src/twisted/mail/imap4.py.
- debian/patches/CVE-2026-106454-3.patch: failing test that uses a python
regexp in src/twisted/mail/test/test_imap.py.
- debian/patches/CVE-2026-106454-4.patch: add more potential matches to
exclude to be sure in src/twisted/mail/test/test_imap.py.
- debian/patches/CVE-2026-106454-5.patch: per code review test some more
cases in src/twisted/mail/test/test_imap.py.
- debian/patches/CVE-2026-106454-6.patch: per code review, docstring for
wildcardToRegexp in src/twisted/mail/imap4.py.
- CVE-2026-106454
-- Marc Deslauriers Thu, 15 Oct 2026 12:15:14 -0400
|
| Source diff to previous version |
| CVE-2026-106454 |
Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp() in twisted/mail/imap |
|
|
twisted (25.5.0-5ubuntu0.1) resolute-security; urgency=medium
* SECURITY UPDATE: DNS name decompression denial of service
- debian/patches/CVE-2026-42304-1.patch: fix denial of service in
twisted.names mitigation in src/twisted/names/dns.py,
src/twisted/names/test/test_dns.py.
- debian/patches/CVE-2026-42304-2.patch: Update src/twisted/names/dns.py.
- debian/patches/CVE-2026-42304-3.patch: Update
src/twisted/names/test/test_dns.py.
- debian/patches/CVE-2026-42304-4.patch: names: Refactor DNS compression
mitigation in src/twisted/names/dns.py,
src/twisted/names/newsfragments/12626.bugfix,
src/twisted/names/test/test_dns.py.
- debian/patches/CVE-2026-42304-5.patch: names: fix changes in
src/twisted/names/dns.py, src/twisted/names/test/test_dns.py.
- debian/patches/CVE-2026-42304-6.patch: Update
src/twisted/names/newsfragments/12626.bugfix.
- CVE-2026-42304
-- Marc Deslauriers <email address hidden> Fri, 22 May 2026 10:20:52 -0400
|
| CVE-2026-42304 |
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to |
|
About
-
Send Feedback to @ubuntu_updates
