From 57e5d57d9d735684a90dc704ce8ca8fb46acb8ac Mon Sep 17 00:00:00 2001 From: Brian May Date: Mon, 15 Apr 2019 16:54:52 +1000 Subject: DLA-706-1 advisory --- english/lts/security/2016/dla-706.data | 10 ++++++++++ english/lts/security/2016/dla-706.wml | 18 ++++++++++++++++++ 2 files changed, 28 insertions(+) create mode 100644 english/lts/security/2016/dla-706.data create mode 100644 english/lts/security/2016/dla-706.wml diff --git a/english/lts/security/2016/dla-706.data b/english/lts/security/2016/dla-706.data new file mode 100644 index 00000000000..e1e537bc5e8 --- /dev/null +++ b/english/lts/security/2016/dla-706.data @@ -0,0 +1,10 @@ +DLA-706-1 python-django +2016-11-14 +CVE-2016-9014 Bug#842856 +python-django +yes +yes +no + +#use wml::debian::security + diff --git a/english/lts/security/2016/dla-706.wml b/english/lts/security/2016/dla-706.wml new file mode 100644 index 00000000000..a433fb96ba0 --- /dev/null +++ b/english/lts/security/2016/dla-706.wml @@ -0,0 +1,18 @@ +LTS security update + +

A DNS rebinding vulnerability was found in python-django when DEBUG=True. +An attacker could attack services listening on localhost.

+ +

For Debian 7 Wheezy, these problems have been fixed in version +1.4.22-1+deb7u2.

+ +

We recommend that you upgrade your python-django packages.

+ +

Further information about Debian LTS security advisories, how to apply +these updates to your system and frequently asked questions can be +found at: https://wiki.debian.org/LTS

+
+ +# do not modify the following line +#include "$(ENGLISHDIR)/lts/security/2016/dla-706.data" +# $Id: $ -- cgit v1.2.3