ALT-PU-2015-2866: package python-module-django update to version 1.8-alt1.b1
Описание
This update upgrades python-module-django to version 1.8-alt1.b1.
Устраненные уязвимости6
Ссылки7
GHSA-6565-fg86-6jcx
https://github.com/advisories/GHSA-6565-fg86-6jcxGHSA-6g95-x6cj-mg4v
https://github.com/advisories/GHSA-6g95-x6cj-mg4vGHSA-6wcr-wcqm-3mfh
https://github.com/advisories/GHSA-6wcr-wcqm-3mfhGHSA-7qfw-j7hp-v45g
https://github.com/advisories/GHSA-7qfw-j7hp-v45gGHSA-gv98-g628-m9x5
https://github.com/advisories/GHSA-gv98-g628-m9x5GHSA-jhjg-w2cp-5j44
https://github.com/advisories/GHSA-jhjg-w2cp-5j44Связанные уязвимости
Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header.
Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header.
Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header.
Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allo ...
