Stay Secure with the Latest Linux Advisories

security advisoryupdatecritical

Fedora 24 FEDORA-2016-3eb5a55123 Critical: Python-Django Security Fix

Security fix for CVE-2016-9013, CVE-2016-9014. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-3eb5a55123 2016-11-14 16:02:01.272166 -------------------------------------------------------------------------------- Name : python-django Product : Fedora 24 Version : 1.9.11 Release : 1.fc24 URL : http://www.djangoproject.com/ Summary : A high-level Python Web framework Description : Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-9013, CVE-2016-9014 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1389414 - CVE-2016-9013 python-django: user with hardcoded password created when running tests on Oracle https://bugzilla.redhat.com/show_bug.cgi?id=1389414 [ 2 ] Bug #1389417 - CVE-2016-9014 python-django: DNS rebinding vulnerability when 'DEBUG=True' https://bugzilla.redhat.com/show_bug.cgi?id=1389417 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade python-django' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical security patch for python-django in Fedora 24 rectifies serious issues, notably a weakness in password handling.. Python Django, Fedora Update, Security Patches, Application Security. . LinuxSecurity.com Team

Nov 14, 2016 Fedora