Logo
Explore Help
Sign In
Narcissus/shredos.x86_64
2
0
Fork 1
You've already forked shredos.x86_64
mirror of https://github.com/PartialVolume/shredos.x86_64.git synced 2026-02-21 10:02:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
bdd8362a88428ed1c04fc6f4bbcbf7692b2a2b39
shredos.x86_64/package/python-django/python-django.hash

3 lines
168 B
Plaintext
Raw Normal View History

python-django: security bump to version 1.7.3 Fixes: CVE-2015-0219 - incorrectly handled underscores in WSGI headers. A remote attacker could possibly use this issue to spoof headers in certain environments. CVE-2015-0220 - incorrectly handled user-supplied redirect URLs. A remote attacker could possibly use this issue to perform a cross-site scripting attack. CVE-2015-0221 - incorrectly handled reading files in django.views.static.serve(). A remote attacker could possibly use this issue to cause Django to consume resources, resulting in a denial of service. CVE-2015-0222 - incorrectly handled forms with ModelMultipleChoiceField. A remote attacker could possibly use this issue to cause a large number of SQL queries, resulting in a database denial of service. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-01-14 15:21:44 -03:00
# sha256 from https://www.djangoproject.com/m/pgp/Django-1.7.3.checksum.txt
sha256 f226fb8aa438456968d403f6739de1cf2dad128db86f66ee2b41dfebe3645c5b Django-1.7.3.tar.gz
Reference in New Issue Copy Permalink
Powered by Gitea Version: 1.25.4 Page: 1063ms Template: 1ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API