FEDORA-2015-1dd5bc998f — security update for python-django

stable

python-django-1.8.6-1.fc23

FEDORA-2015-1dd5bc998f created by mrunge 10 years ago for Fedora 23

rebase to 1.8.6 (#1276914)

rebase to 1.8.5 (#1276914)

python-django-1.8.4-1.fc23

Do not install bash completion for python executables (Ville Skyttä, #1253076)
CVE-2015-5963 Denial-of-service possibility in logout() view by filling session store (#1254911)
CVE-2015-5964 Denial-of-service possibility in logout() view by filling session store (#1252891)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-1dd5bc998f

This update has been submitted for testing by mrunge.

10 years ago

This update has obsoleted python-django-1.8.5-1.fc23, and has inherited its bugs and notes.

10 years ago

This update has been pushed to testing.

10 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

10 years ago

akurtakov commented & provided feedback 10 years ago

karma

works for me

This update has been submitted for stable by mrunge.

10 years ago

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

Builds

python-django-1.8.6-1.fc23

BZ#1242715 CVE-2015-5143 python-django: Django: possible DoS by filling session store [fedora-all]

BZ#1242720 CVE-2015-5144 python-django: Django: possible header injection due to validators accepting newlines in input [fedora-all]

BZ#1242721 CVE-2015-5144 python-django: Django: possible header injection due to validators accepting newlines in input [epel-7]

BZ#1253076 Do not install bash completion for python executables

BZ#1254911 CVE-2015-5963 python-django: Denial-of-service possibility in logout() view by filling session store [fedora-all]

BZ#1254921 CVE-2015-5964 python-django: Denial-of-service possibility in logout() view by filling session store [fedora-all]

BZ#1276914 Django 1.8.5 is available

python-django-1.8.6-1.fc23

Automated Test Results

None