Fedora: python-django Security Advisory for DoS Risks in Logout View
fedora
November 19, 2015
rebase to 1.8.6 (rhbz#1276914) ---- rebase to 1.8.5 (rhbz#1276914) ---- python-django-1.8.4-1.fc23 - Do not install bash completion for python executables (Ville Skyttä, rhbz#1...
Summary
Django is a high-level Python Web framework that encourages rapid
development and a clean, pragmatic design. It focuses on automating as
much as possible and adhering to the DRY (Don't Repeat Yourself)
principle.
Update Information:
rebase to 1.8.6 (rhbz#1276914) ---- rebase to 1.8.5 (rhbz#1276914) ---- python-django-1.8.4-1.fc23 - Do not install bash completion for python executables (Ville Skyttä, rhbz#1253076) - CVE-2015-5963 Denial-of-service possibility in logout() view by filling session store (rhbz#1254911) - CVE-2015-5964 Denial-of-service possibility in logout() view by filling session store (rhbz#1252891)
Topics Covered
Change Log
References
[ 1 ] Bug #1276914 - Django 1.8.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1276914
[ 2 ] Bug #1242721 - CVE-2015-5144 python-django: Django: possible header injection due to validators accepting newlines in input [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1242721
[ 3 ] Bug #1242720 - CVE-2015-5144 python-django: Django: possible header injection due to validators accepting newlines in input [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1242720
[ 4 ] Bug #1242715 - CVE-2015-5143 python-django: Django: possible DoS by filling session store [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1242715
[ 5 ] Bug #1254921 - CVE-2015-5964 python-django: Denial-of-service possibility in logout() view by filling session store [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1254921
[ 6 ] Bug #1254911 - CVE-2015-5963 python-django: Denial-of-service possibility in logout() view by filling sess...
Update Instructions
This update can be installed with the "yum" update program. Use su -c 'yum update python-django' at the command line. For more information, refer to "Managing Software with yum", available at .
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: python-django
Product: Fedora 23
Version: 1.8.6
Release: 1.fc23
Summary: A high-level Python Web framework
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!