[SECURITY] [DLA 3744-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3744-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 29, 2024 https://wiki.debian.org/LTS -...

RHEL 8 : Red Hat OpenStack Platform 16.2 (python-django20) (RHSA-2021:3490)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3490 advisory. Security Fixes: Potential directory-traversal via archive.extract CVE-2021-3281 Potential directory traversal via admindocs CVE-2021-33203...

Ubuntu: Security Advisory (USN-4975-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0356)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : Red Hat OpenStack Platform 16.1 (python-django20) (RHSA-2021:5070)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5070 advisory. Security Fixes: Potential directory-traversal via archive.extract CVE-2021-3281 potential directory-traversal via uploaded files...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update

An update for python-django20 is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Updated python-django package fixes security vulnerabilities

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability CVE-2021-28658. In Django 2.2 before 2.2.21, 3.1 before 3.1.9, an...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.24-alt1

July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1

July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...

[ASA-202106-41] python-django: multiple issues

Arch Linux Security Advisory ASA-202106-41 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-33203 CVE-2021-33571 Package : python-django Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2026 Summary ======= The package...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) potentially affected by CVE-2021-33203 via django (1.9.0rc2)

django PYPI version 1.9.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-amazon-price-monitor =0.3.0b2, =0.3.4, =0.3.6 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

goshstore (0.3.0) potentially affected by CVE-2021-33203 via django (1.9.1)

django PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - goshstore 0.3.0 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

rinzler (2.0.3) potentially affected by CVE-2021-33203 via django (1.10.4)

django PYPI version 1.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - rinzler 2.0.3 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

acclaim-badges (0.1.0), aimmo (>=0.1.0b2696.post0.dev1, <=0.27.4b5229) +100 more potentially affected by CVE-2021-33203 via django (1.10.8)

django PYPI version 1.10.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - acclaim-badges 0.1.0 - aimmo =0.1.0b2696.post0.dev1, =0.2.1, =2.0.0, =0.3.1, =2.1.1.16070820, =2.1.1.16072018, =2.1.1.16070812, =1.0.0, =1.1.0 -...

django-admin-caching (0.1.3), django-budget (0.7.2) +19 more potentially affected by CVE-2021-33203 via django (1.11.0)

django PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching 0.1.3 - django-budget 0.7.2 - django-currentuser =0.1.0, =0.1.2, =1.5.0, =1.1.7, =0.0.1, =1.18.0, =1.20.0 and more Source cves...

directory-api-client (9.15.2), simpl-modelservice (>=0.7.7, <=0.7.9) potentially affected by CVE-2021-33203 via django (1.11.11)

django PYPI version 1.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client 9.15.2 - simpl-modelservice =0.7.7, =0.7.9 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

configfactory (0.35.0.dev0), labeler (0.0.1) potentially affected by CVE-2021-33203 via django (1.11.4)

django PYPI version 1.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - configfactory 0.35.0.dev0 - labeler 0.0.1 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2021-33203 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2021-33203 Source...

autogenerated-api (1.1.9), django-oscar-moysklad (>=0.2.4, <=0.2.5) +2 more potentially affected by CVE-2021-33203 via django (1.11.18)

django PYPI version 1.11.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autogenerated-api 1.1.9 - django-oscar-moysklad =0.2.4, =1.0.0b0, =1.0.0b1 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

cosmicdb (>=0.0.19, <=0.0.24) potentially affected by CVE-2021-33203 via django (1.11.13)

django PYPI version 1.11.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdb =0.0.19, =0.0.24 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...