tocsin

Debian/python-django: unknown

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP r

Action: Upgrade python-django to 1.7.9-1 or later.

Affected

introducedfixedlast affected
01.7.9-1-

Fixed versions

1.7.9-1

Sources

published · modified · JSON