ALT-PU-2016-2173: package python-module-django update to version 1.8.15-alt1
Описание
This update upgrades python-module-django to version 1.8.15-alt1.
Устраненные уязвимости4
Ссылки5
GHSA-c8c8-9472-w52h
https://github.com/advisories/GHSA-c8c8-9472-w52hGHSA-crhm-qpjc-cm64
https://github.com/advisories/GHSA-crhm-qpjc-cm64GHSA-fp6p-5xvw-m74f
https://github.com/advisories/GHSA-fp6p-5xvw-m74fGHSA-pw27-w7w4-9qc7
https://github.com/advisories/GHSA-pw27-w7w4-9qc7Связанные уязвимости
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.