Red Hat Security AdvisoryRHSA-2015:1767
python-django security update
Released 2015-09-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 python-django-1.6.11-3.el7ost, python-django-bash-completion-1.6.11-3.el7ost, python-django-doc-1.6.11-3.el7ost
Fixes 2 records
Priority LOW 31
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circ…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05064 · Published 2015-08-24 · Fixed in 1.7.10, 1.4.22 CWE-399
Priority LOW 31
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consum…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05206 · Published 2015-08-24 · Fixed in 1.8.4, 1.7.10 +1 CWE-399
