Ubuntu Security Notice 3585-1 - It was discovered that Twisted incorrectly handled certain HTTP requests. An attacker could possibly use this issue to execute arbitrary code.
6c609a9e2691d6eed8bc3f861c4ee967dd833b66728ff40a58ff763217a9250a
==========================================================================
Ubuntu Security Notice USN-3585-1
March 05, 2018
twisted vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Twisted could be made to run programs if it received specially crafted
network traffic.
Software Description:
- twisted: Event-based framework for internet applications
Details:
It was discovered that Twisted incorrectly handled certain HTTP
requests. An attacker could possibly use this issue to execute
arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 LTS:
python-twisted 16.0.0-1ubuntu0.2
python-twisted-bin 16.0.0-1ubuntu0.2
python-twisted-web 16.0.0-1ubuntu0.2
python3-twisted 16.0.0-1ubuntu0.2
Ubuntu 14.04 LTS:
python-twisted 13.2.0-1ubuntu1.2
python-twisted-bin 13.2.0-1ubuntu1.2
python-twisted-web 13.2.0-1ubuntu1.2
In general, a standard system update will make all the necessary
changes.
References:
https://usn.ubuntu.com/usn/usn-3585-1
CVE-2016-1000111
Package Information:
https://launchpad.net/ubuntu/+source/twisted/16.0.0-1ubuntu0.2
https://launchpad.net/ubuntu/+source/twisted/13.2.0-1ubuntu1.2