Fedora 13 : Django-1.2.4-1.fc13 (2011-0096)

medium Nessus Plugin ID 51512

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

- Mon Jan 3 2011 Steve 'Ashcrow' Milner <me at stevemilner.org> - 1.2.4-1

- Update for multiple security issues (see http://www.djangoproject.com/weblog/2010/dec/22/securi ty/)

- Sat Oct 9 2010 Steve 'Ashcrow' Milner <me at stevemilner.org> - 1.2.3-3

- Now build docs for F12+

- Added Django-remove-djangodocs-ext.patch

- Sat Oct 9 2010 Steve 'Ashcrow' Milner <me at stevemilner.org> - 1.2.3-2

- Moved to dirhtml for documentation generation

- Mon Sep 13 2010 Steve 'Ashcrow' Milner <me at stevemilner.org> - 1.2.3-1

- Update for http://www.djangoproject.com/weblog/2010/sep/10/123/

- Thu Sep 9 2010 Steve 'Ashcrow' Milner <me at stevemilner.org> - 1.2.2-1

- Update for CVE-2010-3082 (see http://www.djangoproject.com/weblog/2010/sep/08/securi ty-release/)

- Removed Django-hash-compat-13310.patch as it is already included in this release

- Wed Jul 21 2010 David Malcolm <dmalcolm at redhat.com>
- 1.2.1-6

- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/Mas sRebuild

- Tue Jun 8 2010 Steve 'Ashcrow' Milner <stevem at gnulinux.net> - 1.2.1-5

- Added http://code.djangoproject.com/changeset/13310?format=d iff&new=13310 per BZ#601212

- Thu Jun 3 2010 Steve 'Ashcrow' Milner <stevem at gnulinux.net> - 1.2.1-4

- Include egg in >= rhel6

- Thu Jun 3 2010 Michel Salim <salimma at fedoraproject.org> - 1.2.1-3

- Use generated %{name}.lang instead of including each locale file by hand

- Temporarily make main package provide -doc on Rawhide, to fix upgrade path until upstream documentation builds with Sphinx 1.0

- Thu May 27 2010 Steve 'Ashcrow' Milner <stevem at gnulinux.net> - 1.2.1-2

- Allow for building docs in F13 as it's only F14 freaking out

- Tue May 25 2010 Steve 'Ashcrow' Milner <stevem at gnulinux.net> - 1.2.1-1

- Update for new release.

- Added lang files per BZ#584866.

- Changed perms on %{python_sitelib}/django/contrib/admin/media/js/compre ss.py

- Lots of explicit files listed in %files in order to reduce duplicate file listings

- Docs are not built on F-13 for now

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected Django package.

Plugin Details

Severity: Medium

ID: 51512

File Name: fedora_2011-0096.nasl

Version: 1.12

Type: local

Agent: unix

Family: Fedora Local Security Checks

Published: 1/14/2011

Updated: 1/11/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:fedoraproject:fedora:13, p-cpe:/a:fedoraproject:fedora:django

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 1/4/2011

Reference Information

CVE: CVE-2010-4534, CVE-2010-4535

FEDORA: 2011-0096

Detections

Analytics