Test Kennung:	1.3.6.1.4.1.25623.1.0.131147
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2015-0463)
Zusammenfassung:	The remote host is missing an update for the 'python-django' package(s) announced via the MGASA-2015-0463 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'python-django' package(s) announced via the MGASA-2015-0463 advisory. Vulnerability Insight: If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, then a malicious user could obtain any secret in the application's settings by specifying a settings key instead of a date format (CVE-2015-8213). Affected Software/OS: 'python-django' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8213 BugTraq ID: 77750 http://www.securityfocus.com/bid/77750 Debian Security Information: DSA-3404 (Google Search) http://www.debian.org/security/2015/dsa-3404 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174770.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173375.html RedHat Security Advisories: RHSA-2016:0129 http://rhn.redhat.com/errata/RHSA-2016-0129.html RedHat Security Advisories: RHSA-2016:0156 http://rhn.redhat.com/errata/RHSA-2016-0156.html RedHat Security Advisories: RHSA-2016:0157 http://rhn.redhat.com/errata/RHSA-2016-0157.html RedHat Security Advisories: RHSA-2016:0158 http://rhn.redhat.com/errata/RHSA-2016-0158.html http://www.securitytracker.com/id/1034237 SuSE Security Announcement: openSUSE-SU-2015:2199 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:2202 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00017.html http://www.ubuntu.com/usn/USN-2816-1
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.