RHSA-2020:1561 — Security Advisory
Red Hat Security Advisory: python-twisted-web security update
Severity
ImportantRed Hat Product Security
Products
Official CSAF product identity
Published · April 23, 2020
Updated · June 27, 2026
Topic
An update for python-twisted-web is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Twisted is an event-based framework for internet applications. Twisted Web is a complete web server, aimed at hosting web applications using Twisted and Python, but fully able to serve static pages too.
Security Fix(es):
-
python-twisted: HTTP request smuggling when presented with two Content-Length headers (CVE-2020-10108)
-
python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header (CVE-2020-10109)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.