Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:13.1:Update
patchinfo.4018
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.4018
<patchinfo incident="4018"> <issue id="914706" tracker="bnc">horizon dashboard: first login always fails</issue> <issue id="923176" tracker="bnc">VUL-1: CVE-2015-2317: python-django,python-Django: Django: possible XSS attack via user-supplied redirect URLs</issue> <issue id="941587" tracker="bnc">VUL-0: CVE-2015-5963,CVE-2015-5964: python-django,python-Django: DoS by filling session store via logout()</issue> <issue id="913054" tracker="bnc">VUL-1: CVE-2015-0220: python-django: Mitigated possible XSS attack via user-supplied redirect URLs</issue> <issue id="913055" tracker="bnc">VUL-1: CVE-2015-0222: python-django: database denial of service with ModelMultipleChoiceField</issue> <issue id="913053" tracker="bnc">VUL-1: CVE-2015-0219: python-django: WSGI header spoofing via underscore/dash conflation</issue> <issue id="913056" tracker="bnc">VUL-1: CVE-2015-0221: python-django: denial of service attack against django.views.static.serve</issue> <issue id="CVE-2015-2317" tracker="cve" /> <issue id="CVE-2015-5963" tracker="cve" /> <issue id="CVE-2015-0219" tracker="cve" /> <issue id="CVE-2015-0222" tracker="cve" /> <issue id="CVE-2015-0221" tracker="cve" /> <issue id="CVE-2015-0220" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>bmwiedemann</packager> <description> python Django was updated to fix a remote denial of service (resource exhaustion) possibility in the auth views module. (bsc#941587, CVE-2015-5963) Also is_safe_url() was made to reject URLs that start with control characters to mitigate possible XSS attack via user-supplied redirect URLs (bnc#923176, CVE-2015-2317) - Method check_for_test_cookie is deprecated, bnc#914706 - Update to version 1.5.12 with various security fixes: + Fixed a regression with dynamically generated inlines and allowed field references in the admin + Allowed related many-to-many fields to be referenced in the admin + Allowed inline and hidden references to admin fields </description> <summary>Security update for python-django</summary> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor