Ubuntu alert USN-8380-1 (twisted)
| From: | noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-8380-1] Twisted vulnerability | |
| Date: | Wed, 03 Jun 2026 17:19:03 +0000 | |
| Message-ID: | <E1wUpF9-0005kK-28@lists.ubuntu.com> | |
| Cc: | noreply+usn-bot@canonical.com |
========================================================================== Ubuntu Security Notice USN-8380-1 June 03, 2026 twisted vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Twisted could be made to crash if it received specially crafted network traffic. Software Description: - twisted: Event-based framework for internet applications Details: It was discovered that Twisted incorrectly handled DNS name decompression. A remote attacker could possibly use this issue to cause Twisted to consume excessive resources, leading to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS python3-twisted 25.5.0-5ubuntu0.1 Ubuntu 25.10 python3-twisted 24.11.0-1ubuntu0.1 Ubuntu 24.04 LTS python3-twisted 24.3.0-1ubuntu0.2 Ubuntu 22.04 LTS python3-twisted 22.1.0-2ubuntu2.7 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8380-1 CVE-2026-42304 Package Information: https://launchpad.net/ubuntu/+source/twisted/25.5.0-5ubun... https://launchpad.net/ubuntu/+source/twisted/24.11.0-1ubu... https://launchpad.net/ubuntu/+source/twisted/24.3.0-1ubun... https://launchpad.net/ubuntu/+source/twisted/22.1.0-2ubun...
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmogYCkACgkQcpJm3tlz hgHnAQ//e8iibdk83wTBdsU0vhGbV2HNiZBjjUEqvzTw0u4frw9Zvkb9MwlTmt9F 2pceNeqK1/bZ7gW/ZVJWsNnktQnQGo+shWIuyy1DgnYOKvSEEVDsvXIM6ackS/jv NBGUr1U1v88CzpeIj4L6CV/Ym2vv/yeElTb/LA1gwMcKZcPyhKXtWHUDearE1Fuf bK+ZsblBEXrhv0TA8ku9S92v6P/xUymGm1fri0Np7qRcrGkVHQU089DIZmvaODWU MKMQwl7G3/BgJ/tvtWAjQIM06PcDLO1h5m8TZgaab0JPJtKkfR4zA456HLgbkwBj ntrCDZxPCMocBC3Wq9l6otk7Jyfl78sf2EJr1/Y1jaia4WUGiFhr+GIuvFd24TRK 25oTV1MBt8nU1DCJEB3rDaHYDKS1nby0ZGBATwZ61XGKdKnfeu8WwMqG0ZwgfY9o B1E5ufpFESaerob4d/8mAMENrH9GJl/6AZkg/gh6S3sSfF0uMkUkG+jvi7lVX/5X jEx6tErYZOZwvm/vXMKQ7n4TSgd+BCXrGxOj/AvJsNJ3cS9ef5kONsH8yPaIqVty TOwWnznKc1AhXLwFPMvvZLdBiwu4Bw9PlXWEpFbI4pttR2+Z13KqIgyIOxINDvH7 Zb1sLXGrMd/GwvLS/l8xo52tBbg+Vf0j7a9MvfXGsDzRi4j6x8A= =hg4b -----END PGP SIGNATURE-----