Fedora 20 Security Update: python-django14-1.4.16-1.fc20

Resolved Bugs
1132774 – CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 python-django14: various flaws [fedora-all]
1129950 – CVE-2014-0480 Django: reverse() can generate URLs pointing to other hosts, leading to phishing attacks
1129952 – CVE-2014-0481 Django: file upload denial of service
1129954 – CVE-2014-0482 Django: RemoteUserMiddleware session hijacking
1129959 – CVE-2014-0483 Django: data leakage via querystring manipulation in admin<br
update to latest stable release

Leave a Reply