Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 414
Alerts This Week
Warning Icon 1 414

Fedora 24: python-tgcaptcha2 Security Update Prevents Replay Attack

fedora
Calendar Grey May 7, 2016
Dist Fedora Esm H88
The django-safetycheck package in Ubuntu 20.04 introduces safeguards, bolstering protection against data breaches.
Implemented nonces to prevent replay attack (DWF-2016-89000).

Summary

TGCaptcha2 is a TurboGears widget that provides an easy way to

incorporate a captcha as part a form in an attempt to reduce spam or

malicious activity.

Features include:

* (Relatively) pain-free usage and validation inside of a regular

widget-based form

* Flexibility to add or extend image generation algorithms and the

text displayed in the image

Enhanced with:

* Embed a word in the image or an equation that the user has to

solve

* Add an audio captch

Update Information:

Implemented nonces to prevent replay attack (DWF-2016-89000).

Topics%20covered

Topics Covered

security advisory software update Fedora replay attack python plugin

Change Log

References


[ 1 ] Bug #1316083 - tgcaptcha does not have any prevention against replay attacks https://bugzilla.redhat.com/show_bug.cgi?id=1316083

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-tgcaptcha2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-tgcaptcha2
Product: Fedora 24
Version: 0.3.1
Release: 1.fc24
URL: https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement
Summary: TurboGears captcha plugin

Topics%20covered

Topics Covered

security advisory software update Fedora replay attack python plugin

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.