Stay Secure with the Latest Linux Advisories

security advisoryinformation leakupdate

Fedora 23: FEDORA-2015-a8c8f60fbd Critical: Django Settings Leak

This update fixes CVE-2015-8213: Fixed settings leak possibility in date template filter, more info can be found https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued/. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-a8c8f60fbd 2015-12-07 17:40:03.178278 -------------------------------------------------------------------------------- Name : python-django Product : Fedora 23 Version : 1.8.7 Release : 1.fc23 URL : http://www.djangoproject.com/ Summary : A high-level Python Web framework Description : Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle. -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2015-8213: Fixed settings leak possibility in date template filter, more info can be found https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1283553 - CVE-2015-8213 python-django: Information leak through date template filter https://bugzilla.redhat.com/show_bug.cgi?id=1283553 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-django' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . This patch for Ubuntu addresses a major configuration vulnerability in python-flask associated with CVE-2018-16474 disclosed on Oct 18, 2018.. Python Django Security, Fedora Update, Settings Leak Fix. . LinuxSecurity.com Team

Dec 07, 2015 Fedora