[SECURITY] Fedora 20 Update: python-django-evolution-0.6.9-4.fc20

When you run ./manage.py syncdb, Django will look for any new models that have been defined, and add a database table to represent those new models. However, if you make a change to an existing model, ./manage.py syncdb will not make any changes to the database. This is where Django Evolution fit...

[SECURITY] Fedora 19 Update: python-django-evolution-0.6.9-4.fc19

When you run ./manage.py syncdb, Django will look for any new models that have been defined, and add a database table to represent those new models. However, if you make a change to an existing model, ./manage.py syncdb will not make any changes to the database. This is where Django Evolution fit...

Fedora 20 : ReviewBoard-1.7.26-2.fc20 / python-django-evolution-0.6.9-4.fc20 (2014-7348)

Django Evolution: Drop back down to 0.6.9 as 0.7.x breaks Review Board upgrades. We'll support 0.7.x on Fedora 21 and EPEL 7 with Review Board 2.0 ReviewBoard: Address XSS vulnerabilities Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 19 : ReviewBoard-1.7.26-2.fc19 / python-django-evolution-0.6.9-4.fc19 (2014-7333)

Django Evolution: Drop back down to 0.6.9 as 0.7.x breaks Review Board upgrades. We'll support 0.7.x on Fedora 21 and EPEL 7 with Review Board 2.0 ReviewBoard: Address XSS vulnerabilities Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

GLSA-201406-26 : Django: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-26 Django: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute code with the privileges ...

Django: Multiple vulnerabilities

Background Django is a Python-based web framework. Description Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced below for details. Impact A remote attacker could execute code with the privileges of the process, modify SQL queries, or disclose...

[SECURITY] Fedora 19 Update: python-jinja2-2.6-7.fc19

Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. If you have any exposure to other text-based template languages, such as Smarty or Django, you should feel right at home with...

[SECURITY] Fedora 19 Update: python-djblets-0.7.30-2.fc19

A collection of useful classes and functions for Django...

[SECURITY] Fedora 20 Update: python-djblets-0.7.30-2.fc20

A collection of useful classes and functions for Django...

CVE-2014-3994

Cross-site scripting XSS vulnerability in util/templatetags/djbletsjs.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated by the name field when changing a user na...

CVE-2014-3995

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

PYSEC-2014-79

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

Cross site scripting

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

Cross site scripting

Cross-site scripting XSS vulnerability in util/templatetags/djbletsjs.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated by the name field when changing a user na...

CVE-2014-3994

Cross-site scripting XSS vulnerability in util/templatetags/djbletsjs.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated by the name field when changing a user na...

CVE-2014-3995

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

PYSEC-2014-78

Cross-site scripting XSS vulnerability in util/templatetags/djbletsjs.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated by the name field when changing a user na...

CVE-2014-3995

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

CVE-2014-3994

CVE-2014-3994 is a cross-site scripting (XSS) vulnerability in Djblets’ util/templatetags/djblets_js.py used with Django/Review Board. Djblets versions before 0.7.30 and 0.8.x before 0.8.3 allow remote attackers to inject arbitrary script/HTML via a JSON object, demonstrated by the name field whe...

CVE-2014-3995

Djblets gravatars.py XSS (CVE-2014-3995) affects Djblets for Django via user display name. The vulnerable code paths are in gravatars/templatetags/gravatars.py, with flaws present in versions before 0.7.30 and in 0.8.x before 0.8.3. Exploitation allows remote attackers to inject arbitrary web scr...