SUSE Package Hub - openSUSE-2019-2110

Update Info

openSUSE-2019-2110

Security update for python-Twisted

Type: security

Severity: moderate

Issued: 2019-09-10

Description:

This update for python-Twisted fixes the following issues:

Security issue fixed:

- CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks (bsc#1138461).

This update was imported from the SUSE:SLE-15:Update update project.
This update was imported from the openSUSE:Leap:15.0:Update update project.

References

CVE: CVE-2019-12855
Bugzilla: 1138461 VUL-0: CVE-2019-12855: python-Twisted: XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.

Packages

python-Twisted-17.9.0-bp150.4.6.1