Security update for python-Django
This update fixes the following security issues: - (bnc#955412, CVE-2015-8213) Possible settings leak in date template filter - (bnc#937522, CVE-2015-5143) Possible denial-of-service in session store - (bnc#937523, CVE-2015-5144) Possible Header injection - (bnc#941587, CVE-2015-5963) Possible denial-of-service by filling session store via logout()
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update fixes the following security issues: - (bnc#955412, CVE-2015-8213) Possible settings leak in date template filter - (bnc#937522, CVE-2015-5143) Possible denial-of-service in session store - (bnc#937523, CVE-2015-5144) Possible Header injection - (bnc#941587, CVE-2015-5963) Possible denial-of-service by filling session store via logout()
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/937522
- https://bugzilla.suse.com/937523
- https://bugzilla.suse.com/941587
- https://bugzilla.suse.com/955412
- https://www.suse.com/security/cve/CVE-2015-5143
- https://www.suse.com/security/cve/CVE-2015-5144
- https://www.suse.com/security/cve/CVE-2015-5963
- https://www.suse.com/security/cve/CVE-2015-8213
- https://www.suse.com/support/update/announcement/2016/suse-su-20160044-1/