FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

django -- multiple vulnerabilities

Affected packages
1.4	<=	py27-django	<	1.4.18
1.5	<=	py27-django	<=	1.5.12
1.6	<=	py27-django	<	1.6.10
1.7	<=	py27-django	<	1.7.3
1.4	<=	py32-django	<	1.4.18
1.5	<=	py32-django	<=	1.5.12
1.6	<=	py32-django	<	1.6.10
1.7	<=	py32-django	<	1.7.3
1.4	<=	py33-django	<	1.4.18
1.5	<=	py33-django	<=	1.5.12
1.6	<=	py33-django	<	1.6.10
1.7	<=	py33-django	<	1.7.3
1.4	<=	py34-django	<	1.4.18
1.5	<=	py34-django	<=	1.5.12
1.6	<=	py34-django	<	1.6.10
1.7	<=	py34-django	<	1.7.3
		py27-django-devel	<	20150124,1
		py32-django-devel	<	20150124,1
		py33-django-devel	<	20150124,1
		py34-django-devel	<	20150124,1

Details

VuXML ID	9c7b6c20-a324-11e4-879c-00e0814cab4e
Discovery	2015-01-13
Entry	2015-01-23
Modified	2015-01-24

The Django project reports:

Today the Django team is issuing multiple releases -- Django 1.4.18, Django 1.6.10, and Django 1.7.3 -- as part of our security process. These releases are now available on PyPI and our download page.

These releases address several security issues. We encourage all users of Django to upgrade as soon as possible.

[source]

References

CVE Name	CVE-2015-0219
CVE Name	CVE-2015-0220
CVE Name	CVE-2015-0221
CVE Name	CVE-2015-0222
URL	https://www.djangoproject.com/weblog/2015/jan/13/security/