Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 25: Security Advisory for python-django Critical Issues

Security fix for CVE-2016-9013, CVE-2016-9014. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-d4571bf555 2016-11-19 18:59:18.551141 -------------------------------------------------------------------------------- Name : python-django Product : Fedora 25 Version : 1.9.11 Release : 1.fc25 URL : http://www.djangoproject.com/ Summary : A high-level Python Web framework Description : Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-9013, CVE-2016-9014 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1389414 - CVE-2016-9013 python-django: user with hardcoded password created when running tests on Oracle https://bugzilla.redhat.com/show_bug.cgi?id=1389414 [ 2 ] Bug #1389417 - CVE-2016-9014 python-django: DNS rebinding vulnerability when 'DEBUG=True' https://bugzilla.redhat.com/show_bug.cgi?id=1389417 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade python-django' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. . Urgent patch release for Python-Django aimed at mitigating CVE-2016-9013 and CVE-2016-9014 vulnerabilities in Fedora 25 systems.. Fedora Python-Django Update, High-Level Framework Security, CVE Security Fix. . LinuxSecurity.com Team

Nov 19, 2016 Fedora