-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2021-6b1b1f9053 2021-03-20 00:40:11.437682 --------------------------------------------------------------------------------

Name : python-django Product : Fedora EPEL 8 Version : 2.2.19 Release : 1.el8 URL : http://www.djangoproject.com/ Summary : A high-level Python Web framework Description : Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle.

-------------------------------------------------------------------------------- Update Information:

update to 2.2.19, resolve CVE-2021-23336 (rbhz#1931539) -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 5 2021 Matthias Runge mrunge@redhat.com - 2.2.19-1 - update to 2.2.19, resolve CVE-2021-23336 (rbhz#1931539) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters https://bugzilla.redhat.com/show_bug.cgi?id=1928904 --------------------------------------------------------------------------------

This update can be installed with the "yum" update programs. Use su -c 'yum update python-django' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html

All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------