full-disclosure - [ MDVSA-2012:143 ] python-django

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <E1T4aID-00082q-2K@titan.mandriva.com>
Date: Thu, 23 Aug 2012 18:30:00 +0200
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2012:143 ] python-django

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2012:143
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : python-django
 Date    : August 23, 2012
 Affected: 2011., Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 Multiple vulnerabilities has been discovered and corrected in
 python-django:

 The (1) django.http.HttpResponseRedirect and (2)
 django.http.HttpResponsePermanentRedirect classes in Django before
 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect
 target, which might allow remote attackers to conduct cross-site
 scripting (XSS) attacks via a data: URL (CVE-2012-3442).

 The django.forms.ImageField class in the form system in Django
 before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image
 data during image validation, which allows remote attackers to cause
 a denial of service (memory consumption) by uploading an image file
 (CVE-2012-3443).

 The get_image_dimensions function in the image-handling functionality
 in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk
 size in all attempts to determine dimensions, which allows remote
 attackers to cause a denial of service (process or thread consumption)
 via a large TIFF image (CVE-2012-3444).

 The updated packages have been upgraded to the 1.3.3 version which
 is not vulnerable to these issues.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3442
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3443
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3444
 https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2011:
 68725d98b343053372748fc043a9acf2  2011/i586/python-django-1.3.3-0.1-mdv2011.0.noarch.rpm 
 299698fbd6d338ef27056b7252086930  2011/SRPMS/python-django-1.3.3-0.1.src.rpm

 Mandriva Linux 2011/X86_64:
 cf1c350871d68647a476d4ab31f93685  2011/x86_64/python-django-1.3.3-0.1-mdv2011.0.noarch.rpm 
 299698fbd6d338ef27056b7252086930  2011/SRPMS/python-django-1.3.3-0.1.src.rpm

 Mandriva Enterprise Server 5:
 0a3c29ad46d51eaf9d5cdf3bc1403609  mes5/i586/python-django-1.3.3-0.1mdvmes5.2.noarch.rpm 
 688d1e9c83f568a912aa67ebc42aa982  mes5/SRPMS/python-django-1.3.3-0.1mdvmes5.2.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 24bceea1424c615c4b2f4c9423717df1  mes5/x86_64/python-django-1.3.3-0.1mdvmes5.2.noarch.rpm 
 688d1e9c83f568a912aa67ebc42aa982  mes5/SRPMS/python-django-1.3.3-0.1mdvmes5.2.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFQNi3SmqjQ0CJFipgRAmLEAKCqA5ndrBShmfKOoVKpWBrYLHOhTgCgl33o
OJZDb2rptvBfaN+LNpO5JME=
=brRS
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/