Matt Weber 25bda2ef0a package/python-twisted: Fix several request smuggling attacks ...

CVE-2020-10108
In Twisted Web through 19.10.0, there was an HTTP request splitting
vulnerability. When presented with two content-length headers, it
ignored the first header. When the second content-length value was
set to zero, the request body was interpreted as a pipelined request.

CVE-2020-10109
In Twisted Web through 19.10.0, there was an HTTP request splitting
vulnerability. When presented with a content-length and a chunked
encoding header, the content-length took precedence and the remainder
of the request body was interpreted as a pipelined request.

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2020-07-22 23:11:12 +02:00

..

0001-fix-several-request-smuggling-attacks.patch

…

Config.in

…

python-twisted.hash

…

python-twisted.mk

…