This update for python-Django to version 2.08 fixes the following issues:
The following security vulnerability was fixed:
- CVE-2018-14574: Fixed an redirection vulnerability in CommonMiddleware
(boo#1102680)
The following other bugs were fixed:
- Fixed a regression in Django 2.0.7 that broke the regex lookup on MariaDB
- Fixed a regression where django.template.Template crashed if the
template_string argument is lazy
- Fixed __regex and __iregex lookups with MySQL
- Fixed admin check crash when using a query expression in
ModelAdmin.ordering
- Fixed admin changelist crash when using a query expression without asc()
or desc() in the page’s ordering
- Fixed a regression that broke custom template filters that use decorators - Fixed detection of custom URL converters in included pattern
- Fixed a regression that added an unnecessary subquery to the GROUP BY
clause
on MySQL when using a RawSQL annotation
- Fixed...
Read the Full AdvisoryPatch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2018-914=1
- openSUSE Leap 15.0 (noarch):
python3-Django-2.0.8-lp150.2.3.1
https://www.suse.com/security/cve/CVE-2018-14574.html
https://bugzilla.suse.com/1102680
--
Get the latest Linux and open source security news straight to your inbox.