[ MDVSA-2008:185 ] python-django

[dude67]

python-django

A cross-site request forgery vulnerability was discovered in Django
that, if exploited, could be used to perform unrequested deletion or
modification of data. Updated versions of Django will now discard
posts from users whose sessions have expired, so data will need to
be re-entered in these cases.

The versions of Django shipping with Mandriva Linux have been updated
to the latest patched versions that include the fix for this issue.
In addition, they provide other bug fixes.
_______________________________________________________________________

References:

http://www.djangoproject.com/weblog/200 ... /security/
_______________________________________________________________________