Red Hat Security AdvisoryRHSA-2015:1686
python-django security update
Released 2015-08-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 python-django-1.6.11-1.el6ost, python-django-bash-completion-1.6.11-1.el6ost, python-django-doc-1.6.11-1.el6ost
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 python-django-1.6.11-2.el7ost, python-django-bash-completion-1.6.11-2.el7ost, python-django-doc-1.6.11-2.el7ost
Fixes 1 record
Priority MEDIUM 44
The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with un…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.07215 · Published 2015-07-14 · Partial fix · 1.4.21, 1.7.9 +1 CWE-399
