Red Hat Security AdvisoryRHSA-2020:4390
python-django security update
Released 2020-10-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 13.0 python-django-1.11.27-1.el7ost, python-django-bash-completion-1.11.27-1.el7ost, python2-django-1.11.27-1.el7ost
- Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server python-django-1.11.27-1.el7ost, python-django-bash-completion-1.11.27-1.el7ost, python2-django-1.11.27-1.el7ost
Fixes 5 records
Priority HIGH 72
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.47694 · Published 2019-08-09 · Partial fix · 1.11.23, 2.1.11 +1 CWE-89
Priority MEDIUM 45
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03531 · Published 2019-08-02 · Partial fix · 1.11.23, 2.1.11 +1 CWE-400
Priority LOW 39
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03172 · Published 2019-08-02 · Partial fix · 1.11.23, 2.1.11 +1 CWE-400
Priority LOW 38
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03073 · Published 2019-08-02 · Partial fix · 1.11.23, 2.1.11 +1 CWE-674
Priority LOW 27
An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01711 · Published 2019-07-01 · Partial fix · 2.1.10, 2.2.3 +1 CWE-319
THREATIST.IORead the docs