FEDORA-EPEL-2020-232e4f7411 — security update for python-django

stable

python-django-2.2.13-1.el8

FEDORA-EPEL-2020-232e4f7411 created by churchyard 4 years ago for Fedora EPEL 8

Update to 2.2.13 - Security fix for CVE-2020-7471 - Security fix for CVE-2020-9402 - Security fix for CVE-2020-13254 - Security fix for CVE-2020-13596

This update has been submitted for testing by churchyard.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

Builds

python-django-2.2.13-1.el8

BZ#1798515 CVE-2020-7471 django: potential SQL injection via StringAgg(delimiter)

BZ#1798519 CVE-2020-7471 python-django: django: potential SQL injection via StringAgg(delimiter) [epel-8]

BZ#1810088 CVE-2020-9402 django: potential SQL injection via "tolerance" parameter in GIS functions and aggregates on Oracle

BZ#1810094 CVE-2020-9402 python-django: django: potential SQL injection via "tolerance" parameter in GIS functions and aggregates on Oracle [epel-all]

BZ#1843614 CVE-2020-13254 django: potential data leakage via malformed memcached keys

BZ#1843616 CVE-2020-13254 python-django: django: potential data leakage via malformed memcached keys [epel-all]

BZ#1843625 CVE-2020-13596 django: possible XSS via admin ForeignKeyRawIdWidget

BZ#1843626 CVE-2020-13596 python-django: django: possible XSS via admin ForeignKeyRawIdWidget [epel-all]

python-django-2.2.13-1.el8

Automated Test Results

ignored