Twisted 22.1.0 Final Release Announcement
Hi On behalf of the Twisted contributors I announce the final release of Twisted 22.1.0 This is mainly a bugfix release. The main bug is: - CVE-2022-21712 twisted.web.client.RedirectAgent and twisted.web.client.BrowserLikeRedirectAgent now properly remove sensitive headers when redirecting to a different origin. (#10294) [1] The only new feature is: - twisted.conch.ssh now supports SSH extension negotiation (RFC 8308). (#10266) The release and NEWS file is available for review at https://github.com/twisted/twisted/pull/1686/files Release documentation is available at https://docs.twistedmatrix.com/en/twisted-22.1.0/ Wheels for the release candidate are available on PyPI https://pypi.org/project/Twisted/22.1.0/ python -m pip install Twisted==22.1.0 Please use it and report any issues. Many thanks to everyone who had a part in Twisted development, the supporters of the Twisted Software Foundation, the developers, and all the people testing and building great things with Twisted! [1] https://github.com/twisted/twisted/security/advisories/GHSA-92x2-jw7w-xvvx -- Adi Roiban
On 07/02/2022 13:28, Adi Roiban wrote:
- CVE-2022-21712 twisted.web.client.RedirectAgent and twisted.web.client.BrowserLikeRedirectAgent now properly remove sensitive headers when redirecting to a different origin. (#10294) [1]
How to go from #10294 to a commit? I found the fix in the history of client.py that I wanted to read. Barry
participants (2)
-
Adi Roiban
-
Barry Scott