Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Fedora 21: FEDORA-2016-10431 High: Django Security Vulnerability Resolved

fedora
Calendar Grey June 18, 2015
Scroller Fedora
Upgrade to Django 1.4.20 focusing on security vulnerability fixes and performance enhancements in the Fedora 20 environment. Key updates ensure improved protection and app reliability.
update to 1.4.20

Summary

Django is a high-level Python Web framework that encourages rapid

development and a clean, pragmatic design. It focuses on automating as

much as possible and adhering to the DRY (Don't Repeat Yourself)

principle.

Update Information:

update to 1.4.20

Topics%20covered

Topics Covered

security advisory moderate update Fedora python XSS attack Django

Change Log

* Fri Jun 5 2015 Matthias Runge - 1.4.20-1 - update to 1.4.20, fix CVE-2015-2317 (rhbz#1203617) * Thu Jan 15 2015 Matthias Runge - 1.4.18-1 - update to 1.4.18 rhbz#1179672,1179675,1179679,1179685,1181940,1181944,1181947 * Mon Nov 17 2014 Matthias Runge - 1.4.16-1 - update to 1.4.16 * Mon Aug 25 2014 Matthias Runge - 1.4.14-1 - update to 1.4.14 fixing CVE-2014-0480 CVE-2014-0481 CVE-2014-0482, CVE-2014-0483 * Sat Jun 7 2014 Fedora Release Engineering - 1.4.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 16 2014 Matthias Runge - 1.4.13-1 - update to 1.4.13 fixing CVE-2014-1418 (rhbz#1097936) * Tue Apr 22 2014 Matthias Runge - 1.4.11-1 - update to 1.4.11 fixing CVE-2014-0473 and CVE-2014-0474 * Thu Apr 3 2014 Matthias Runge - 1.4.8-3 - fix file conflicts with other django packages * Thu Mar 27 2014 Matthias Runge - 1.4.8-2 - Parallel installable version based on Toshio Kuratomis contribution

References


[ 1 ] Bug #1202818 - CVE-2015-2317 Django: possible XSS attack via user-supplied redirect URLs https://bugzilla.redhat.com/show_bug.cgi?id=1202818

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-django14' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: python-django14
Product: Fedora 20
Version: 1.4.20
Release: 1.fc20
URL: http://www.djangoproject.com/
Summary: A high-level Python Web framework

Topics%20covered

Topics Covered

security advisory moderate update Fedora python XSS attack Django

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.