UbuntuUpdates.org

Package "twisted"

Name: twisted

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Event-based framework for internet applications
  • Official documentation of Twisted
Latest version: 26.4.0-4ubuntu0.1
Release: stonking (26.10)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "twisted" in Stonking

Repository Area Version
base main 26.4.0-4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 26.4.0-4ubuntu0.1 2026-11-04 21:08:29 UTC

twisted (26.4.0-4ubuntu0.1) stonking-security; urgency=medium

  * SECURITY UPDATE: DoS in wildcardToRegexp()
    - debian/patches/CVE-2026-106454-1.patch: add a type annotation since we're
      about to make changes in src/twisted/mail/imap4.py.
    - debian/patches/CVE-2026-106454-2.patch: make it pass by escaping
      everything else in src/twisted/mail/imap4.py.
    - debian/patches/CVE-2026-106454-3.patch: failing test that uses a python
      regexp in src/twisted/mail/test/test_imap.py.
    - debian/patches/CVE-2026-106454-4.patch: add more potential matches to
      exclude to be sure in src/twisted/mail/test/test_imap.py.
    - debian/patches/CVE-2026-106454-5.patch: per code review test some more
      cases in src/twisted/mail/test/test_imap.py.
    - debian/patches/CVE-2026-106454-6.patch: per code review, docstring for
      wildcardToRegexp in src/twisted/mail/imap4.py.
    - CVE-2026-106454

 -- Marc Deslauriers Thu, 15 Oct 2026 11:16:12 -0400
CVE-2026-106454 Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp() in twisted/mail/imap


About   -   Send Feedback to @ubuntu_updates