diff options
| author | Brian May <brian@linuxpenguins.xyz> | 2019-04-15 16:54:52 +1000 |
|---|---|---|
| committer | Brian May <brian@linuxpenguins.xyz> | 2019-04-15 17:08:20 +1000 |
| commit | 57e5d57d9d735684a90dc704ce8ca8fb46acb8ac (patch) | |
| tree | 1600afe865bdfdd66918425fb6e83217f2966f8a | |
| parent | b3cc13b7ccbf1dd91c7c8a19767aef32facd5b11 (diff) | |
DLA-706-1 advisory
| -rw-r--r-- | english/lts/security/2016/dla-706.data | 10 | ||||
| -rw-r--r-- | english/lts/security/2016/dla-706.wml | 18 |
2 files changed, 28 insertions, 0 deletions
diff --git a/english/lts/security/2016/dla-706.data b/english/lts/security/2016/dla-706.data new file mode 100644 index 00000000000..e1e537bc5e8 --- /dev/null +++ b/english/lts/security/2016/dla-706.data @@ -0,0 +1,10 @@ +<define-tag pagetitle>DLA-706-1 python-django</define-tag> +<define-tag report_date>2016-11-14</define-tag> +<define-tag secrefs>CVE-2016-9014 Bug#842856</define-tag> +<define-tag packages>python-django</define-tag> +<define-tag isvulnerable>yes</define-tag> +<define-tag fixed>yes</define-tag> +<define-tag fixed-section>no</define-tag> + +#use wml::debian::security + diff --git a/english/lts/security/2016/dla-706.wml b/english/lts/security/2016/dla-706.wml new file mode 100644 index 00000000000..a433fb96ba0 --- /dev/null +++ b/english/lts/security/2016/dla-706.wml @@ -0,0 +1,18 @@ +<define-tag description>LTS security update</define-tag> +<define-tag moreinfo> +<p>A DNS rebinding vulnerability was found in python-django when DEBUG=True. +An attacker could attack services listening on localhost.</p> + +<p>For Debian 7 <q>Wheezy</q>, these problems have been fixed in version +1.4.22-1+deb7u2.</p> + +<p>We recommend that you upgrade your python-django packages.</p> + +<p>Further information about Debian LTS security advisories, how to apply +these updates to your system and frequently asked questions can be +found at: <a href="https://wiki.debian.org/LTS">https://wiki.debian.org/LTS</a></p> +</define-tag> + +# do not modify the following line +#include "$(ENGLISHDIR)/lts/security/2016/dla-706.data" +# $Id: $ |