Multiple vulnerabilities have been discovered in Django, the worst of which could lead to a denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/django | * | < 5.2.1 | >= 5.2.1 |
Django is a Python-based web framework.
Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Django users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-5.2.1"
Multiple vulnerabilities have been found in Django, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/django | * | < 2.2.11 | >= 2.2.11 |
Django is a Python-based web framework.
Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced below for details.
A remote attacker, by sending specially crafted input, could possibly cause a Denial of Service condition, or alter the database.
There is no known workaround at this time.
All Django users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-2.2.11"
Multiple vulnerabilities have been found in Django, the worst of which may allow a remote attacker to cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/django | * | < 1.8.3 | >= 1.8.3, >= 1.7.9 (revision), >= 1.4.21 (revision) |
Django is a Python-based web framework.
Multiple vulnerabilities have been found in Django:
A remote attacker may be able cause a Denial of Service condition, inject arbitrary headers, and conduct HTTP response splitting attacks.
There is no known workaround at this time.
All Django 1.8 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.8.3"
All Django 1.7 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.7.9"
All Django 1.4 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.4.21"
Multiple vulnerabilities have been found in Django, the worst of which may lead to Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/django | * | < 1.6.7 | >= 1.6.7, >= 1.5.10 (revision), >= 1.4.15 (revision) |
Django is a Python-based web framework.
Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced below for details.
A remote attacker may be able to create a Denial of Service condition, obtain sensitive information, or hijack web sessions.
There is no known workaround at this time.
All Django 1.6 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.6.7"
All Django 1.5 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.5.10"
All Django 1.4 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.4.15"
Multiple vulnerabilities have been found Django, the worst of which may allow a remote attacker to execute code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/django | * | < 1.6.5 | >= 1.6.5, >= 1.5.8 (revision), >= 1.4.13 (revision), >= 1.5.10 (revision), >= 1.4.15 (revision) |
Django is a Python-based web framework.
Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced below for details.
A remote attacker could execute code with the privileges of the process, modify SQL queries, or disclose sensitive information.
There is no known workaround at this time.
All Django 1.6 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.6.5"
All Django 1.5 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.5.8"
All Django 1.4 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/django-1.4.13"