Skip to content
OpenAdvisories
High RHSA-2015:1876 1 CVE

Red Hat Security Advisory: python-django security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 7 openstack:7::el7 python-django 0:1.8.4-1.el7
Red Hat · OpenStack 7 openstack:7::el7 python-django-bash-completion 0:1.8.4-1.el7
Red Hat · OpenStack 7 openstack:7::el7 python-django-doc 0:1.8.4-1.el7

Vulnerabilities 1

  • High 7.5
    CVE-2015-5963

    Django denial of service via empty session record creation

    contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a …

    python-django django python-django Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252890
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1876.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5963