Advisories » MGASA-2019-0040

Updated python-django16 package fixes security vulnerability

Publication date: 18 Jan 2019
Modification date: 18 Jan 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2019-3498

Description

It was discovered that Django incorrectly handled the default 404 page.
A remote attacker could use this issue to spoof content using a
malicious URL (CVE-2019-3498).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24173
• https://www.djangoproject.com/weblog/2019/jan/04/security-releases/
• https://usn.ubuntu.com/3851-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3498

SRPMS

6/core

• python-django16-1.6.11.6-1.1.mga6