oss-security - Django multiple flaws (CVEs inside)

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 9 Feb 2011 10:55:31 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Django multiple flaws (CVEs inside)

Hello,

I received a request to assign Django some IDs for three new issues:
http://www.djangoproject.com/weblog/2011/feb/08/security/

CVE-2011-0696 django Flaw in CSRF handling
CVE-2011-0697 django Potential XSS in file field rendering
CVE-2011-0698 django Directory-traversal vulnerability on Windows

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.