Skip to content
OpenAdvisories
High RHSA-2015:1767 2 CVEs

Red Hat Security Advisory: python-django security update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el7 python-django 0:1.6.11-3.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-django-bash-completion 0:1.6.11-3.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-django-doc 0:1.6.11-3.el7ost

Vulnerabilities 2

  • High 7.5
    CVE-2015-5963

    Django denial of service via empty session record creation

    contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a …

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2015-5964

    Denial-of-service possibility in logout() view by filling session store

    The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attacker…

    python-django django python-django Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252890
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252891
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1767.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5963
  • report
    https://access.redhat.com/security/cve/CVE-2015-5964
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5964
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5964