FEDORA-2016-b004d6d8f7 — security update for python-django

stable

python-django-1.8.11-1.fc22

FEDORA-2016-b004d6d8f7 created by mrunge 8 years ago for Fedora 22

fix regression in 1.8.10

update to 1.8.10, fixing CVE-2016-2512, CVE-2016-2513

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-b004d6d8f7

This update has been submitted for testing by mrunge.

8 years ago

This update has obsoleted python-django-1.8.10-1.fc22, and has inherited its bugs and notes.

8 years ago

This update has been pushed to testing.

8 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by mrunge.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

python-django-1.8.11-1.fc22

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1311431 CVE-2016-2512 python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth

BZ#1311438 CVE-2016-2513 python-django: User enumeration through timing difference on password hasher work factor upgrade

BZ#1314342 CVE-2016-2512 python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth [fedora-all]

BZ#1314828 CVE-2016-2513 python-django: User enumeration through timing difference on password hasher work factor upgrade [fedora-all]

python-django-1.8.11-1.fc22

Automated Test Results

None