Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

django: multiple vulnerabilities

Package(s):

django

CVE #(s):

Created:

September 19, 2011

Updated:

September 21, 2011

Description:

Django 1.2.6 and Django 1.3.1 fix several security issues, including session manipulation, a denial of service attack via URLField, URLField redirection, and host header cache poisoning. See the Django advisory for details.

Alerts:

Fedora

FEDORA-2011-12493

2011-09-10

(Log in to post comments)