ALT-PU-2014-3205: package python-module-django update to version 1.6.6-alt1
Описание
This update upgrades python-module-django to version 1.6.6-alt1.
Устраненные уязвимости4
Ссылки5
GHSA-296w-6qhq-gf92
https://github.com/advisories/GHSA-296w-6qhq-gf92GHSA-625g-gx8c-xcmg
https://github.com/advisories/GHSA-625g-gx8c-xcmgGHSA-f7cm-ccfp-3q4r
https://github.com/advisories/GHSA-f7cm-ccfp-3q4rGHSA-rw75-m7gp-92m3
https://github.com/advisories/GHSA-rw75-m7gp-92m3Связанные уязвимости
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x ...
