FEDORA-2016-b004d6d8f7 — security update for python-django

stable

python-django-1.8.11-1.fc22

FEDORA-2016-b004d6d8f7 created by mrunge 10 years ago for Fedora 22

fix regression in 1.8.10

update to 1.8.10, fixing CVE-2016-2512, CVE-2016-2513

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-b004d6d8f7

This update has been submitted for testing by mrunge.

10 years ago

This update has obsoleted python-django-1.8.10-1.fc22, and has inherited its bugs and notes.

10 years ago

This update has been pushed to testing.

10 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

10 years ago

This update has been submitted for stable by mrunge.

10 years ago

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

Builds

python-django-1.8.11-1.fc22

BZ#1311431 CVE-2016-2512 python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth

BZ#1311438 CVE-2016-2513 python-django: User enumeration through timing difference on password hasher work factor upgrade

BZ#1314342 CVE-2016-2512 python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth [fedora-all]

BZ#1314828 CVE-2016-2513 python-django: User enumeration through timing difference on password hasher work factor upgrade [fedora-all]

python-django-1.8.11-1.fc22

Automated Test Results

None