Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.704476
Kategorie:Debian Local Security Checks
Titel:Debian Security Advisory DSA 4476-1 (python-django - security update)
Zusammenfassung:The remote host is missing an update for the 'python-django'; package(s) announced via the DSA-4476-1 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'python-django'
package(s) announced via the DSA-4476-1 advisory.

Vulnerability Insight:
Three security issues were found in Django, a Python web development
framework, which could result in denial of service, incomplete
sanitisation of clickable links or missing redirects of HTTP requests
to HTTPS.

Affected Software/OS:
'python-django' package(s) on Debian Linux.

Solution:
For the stable distribution (stretch), these problems have been fixed in
version 1:1.10.7-2+deb9u5.

We recommend that you upgrade your python-django packages.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2019-6975
BugTraq ID: 106964
http://www.securityfocus.com/bid/106964
Bugtraq: 20190708 [SECURITY] [DSA 4476-1] python-django security update (Google Search)
https://seclists.org/bugtraq/2019/Jul/10
Debian Security Information: DSA-4476 (Google Search)
https://www.debian.org/security/2019/dsa-4476
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVXDOVCXLD74SHR2BENGCE2OOYYYWJHZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66WMXHGBXD7GSM3PEXVCMCAGLMQYHZCU/
https://docs.djangoproject.com/en/dev/releases/security/
https://groups.google.com/forum/#!topic/django-announce/WTwEAprR0IQ
https://www.djangoproject.com/weblog/2019/feb/11/security-releases/
https://www.openwall.com/lists/oss-security/2019/02/11/1
https://usn.ubuntu.com/3890-1/
CopyrightCopyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.