ALAS2-2020-1428: CVEs fixed (Amazon Linux)
ALAS2-2020-1428 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2020-10109 CRITICAL 9.8 UPGRADE MITIGATE In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability
- CVE-2020-10108 CRITICAL 9.8 UPGRADE MITIGATE In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability
Applies to
- Amazon Linux 2