python-django: information disclosure
| Package(s): | python-django |
CVE #(s): | CVE-2014-1418
|
| Created: | May 15, 2014 |
Updated: | May 27, 2014 |
| Description: |
From the Ubuntu advisory:
Stephen Stewart, Michael Nelson, Natalia Bidart and James Westby
discovered that Django improperly removed Vary and Cache-Control headers
from HTTP responses when replying to a request from an Internet Explorer
or Chrome Frame client. An attacker may use this to retrieve private data
or poison caches. This update removes workarounds for bugs in Internet
Explorer 6 and 7. (CVE-2014-1418)
|
| Alerts: |
|
