(RHSA-2015:1686) Moderate: python-django security update

Django is a high-level Python Web framework that encourages rapid
development and a clean, pragmatic design. It focuses on automating as much
as possible and adhering to the DRY (Don’t Repeat Yourself) principle.

A flaw was found in the Django session backend, which could allow an
unauthenticated attacker to create session records in the configured
session store, causing a denial of service by filling up the session store.
(CVE-2015-5143)

Red Hat would like to thank the upstream Django project for reporting
this issue.

All python-django users are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue.