Stay Secure with the Latest Linux Advisories

security advisorysecurity issueremote code execution

Mageia: 2019-0040 Security Update For Django 404 Spoofing Threat

It was discovered that Django incorrectly handled the default 404 page. A remote attacker could use this issue to spoof content using a malicious URL (CVE-2019-3498). References: . MGASA-2019-0040 - Updated python-django16 package fixes security vulnerability Publication date: 18 Jan 2019 URL: https://advisories.mageia.org/MGASA-2019-0040.html Type: security Affected Mageia releases: 6 CVE: CVE-2019-3498 It was discovered that Django incorrectly handled the default 404 page. A remote attacker could use this issue to spoof content using a malicious URL (CVE-2019-3498). References: - https://bugs.mageia.org/show_bug.cgi?id=24173 - https://www.djangoproject.com/weblog/2019/jan/04/security-releases/ - https://ubuntu.com/security/notices/USN-3851-1 - https://www.cve.org/CVERecord?id=CVE-2019-3498 SRPMS: - 6/core/python-django16-1.6.11.6-1.1.mga6 . MGASA-2019-0041 security update tackles a severe vulnerability in Django impacting Mageia 7 versions. Take necessary actions without delay.. Django Security, Mageia Update, Remote Code Issue, Spoofing Vulnerability. . Severity: Important. LinuxSecurity.com Team

Jan 18, 2019 •Important Mageia