FEDORA-2015-1dd5bc998f — security update for python-django

stable

python-django-1.8.6-1.fc23

FEDORA-2015-1dd5bc998f created by mrunge 9 years ago for Fedora 23

rebase to 1.8.6 (#1276914)

rebase to 1.8.5 (#1276914)

python-django-1.8.4-1.fc23

Do not install bash completion for python executables (Ville Skyttä, #1253076)
CVE-2015-5963 Denial-of-service possibility in logout() view by filling session store (#1254911)
CVE-2015-5964 Denial-of-service possibility in logout() view by filling session store (#1252891)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-1dd5bc998f

This update has been submitted for testing by mrunge.

9 years ago

This update has obsoleted python-django-1.8.5-1.fc23, and has inherited its bugs and notes.

9 years ago

This update has been pushed to testing.

9 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

9 years ago

akurtakov commented & provided feedback 9 years ago

karma

works for me

This update has been submitted for stable by mrunge.

9 years ago

This update has been pushed to stable.

9 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

Builds

python-django-1.8.6-1.fc23

BZ#1242715 CVE-2015-5143 python-django: Django: possible DoS by filling session store [fedora-all]

BZ#1242720 CVE-2015-5144 python-django: Django: possible header injection due to validators accepting newlines in input [fedora-all]

BZ#1242721 CVE-2015-5144 python-django: Django: possible header injection due to validators accepting newlines in input [epel-7]

BZ#1253076 Do not install bash completion for python executables

BZ#1254911 CVE-2015-5963 python-django: Denial-of-service possibility in logout() view by filling session store [fedora-all]

BZ#1254921 CVE-2015-5964 python-django: Denial-of-service possibility in logout() view by filling session store [fedora-all]

BZ#1276914 Django 1.8.5 is available

python-django-1.8.6-1.fc23

Automated Test Results

None