USN-5354-1: Twisted vulnerabilities

Related Vulnerabilities: CVE-2022-21712   CVE-2022-21716  

Several security issues were fixed in Twisted.

Details

It was discovered that Twisted incorrectly filtered HTTP headers when clients
are being redirected to another origin. A remote attacker could use this issue
to obtain sensitive information. (CVE-2022-21712)

It was discovered that Twisted incorrectly processed SSH handshake data on
connection establishments. A remote attacker could use this issue to cause
Twisted to crash, resulting in a denial of service. (CVE-2022-21716)