-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 14 Aug 2024 15:05:23 +0100 Source: twisted Architecture: source Version: 24.7.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Colin Watson <cjwatson@debian.org> Closes: 1077679 1077680 Changes: twisted (24.7.0-1) unstable; urgency=medium . * Team upload. * New upstream release: - CVE-2024-41810: twisted.web.util.redirectTo now HTML-escapes the provided URL in the fallback response body it returns (closes: #1077680). - CVE-2024-41671: The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure (closes: #1077679). Checksums-Sha1: f19e3bf766fca8bffc42b703dcc8e449d416e529 2633 twisted_24.7.0-1.dsc 79052caf15aeea1712f306eb4923fd80f7bcb5b3 2662104 twisted_24.7.0.orig.tar.xz 8680852808919af29a00a02177b80c5b225ed8b7 38680 twisted_24.7.0-1.debian.tar.xz Checksums-Sha256: 120d5864f22a569f2b5d2e059b6cc32bd53eee5d5969d0b21ada83cb6a213d41 2633 twisted_24.7.0-1.dsc 0ea083a3781f4c6c4ad87c8cdb2b084cb1b7a4aef69cac6e89a3106434a4677c 2662104 twisted_24.7.0.orig.tar.xz 68aa20a9578a512889bbb4d579f9c8e6a018face060558afbcbfc1ae05f79487 38680 twisted_24.7.0-1.debian.tar.xz Files: ed11defd462306ccb6507d6c3be031eb 2633 python optional twisted_24.7.0-1.dsc e7a3def0b53dd0083e48a444df3de7f6 2662104 python optional twisted_24.7.0.orig.tar.xz 5ea0260593272952bd08b6d2a6fb5e6b 38680 python optional twisted_24.7.0-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAma8ucQACgkQOTWH2X2G UAsuaxAAqDzjo7Jb3Kd7Xd9qI3FOAot5a3LSfRq2JiERE5yRn25J/16TK2wDfatZ r7EaiWgjNgIPCTxdVcREvt9ibnRDeNlJlOl+KA9erNbfKSKvGjl+JdYadDMPZjgl WeEmV2YdH2loVoi28/wC1h1Rk+sskDCE9ddFiaRqPL9P9rbkamg7qd8hyyYonPEi KVvWL/E2IovxWcOv/B8cesJsHaDDJ3AgYDBP1rwPe1EMPtPqL8g46Kr6GIJ1qZZp vfUQ8FcBc8tJ6JTwEhRjWsAkgCYifB0rBgpIYAos4WN5d8yubrQe+YpWLqtXSP3W DAxBdT2P4vfZ4PW1T+5yawp3dcDXEWfkdYTEvS2jl+B7zkJB9J0beXHUh09lsspa ZR8+kclYpk8uhlwPYr170QAIUVGGJmwT78HotNskvzLVIz3Y1K+tDku5shIuVNgJ DEr6/w2MRR6vOGynjMTJ1rOWxyHchJh+Z0+J88ImPk1lmhdeRZ8kL7X0b+QQ5Cat mZaZgI8/Ae2mWtzWHJemJfdLYOhMbASCx4D4cia8TkR61I3TqyhqPiGGOp6RqvhG ATA6C1q6e/n5G6v81t5aK+U9XTUVLIwEDDHXnDAf6DSPZmr+/Tv0YZR5gzGrBwb/ QUk5LJvk31eIGpFU39GT7TvcAqDTiM9lc8CogQwoNU5ovXShkxc= =ntXT -----END PGP SIGNATURE-----