—

PYSEC-2018-2

Quick fix

PYSEC-2018-2 — django: upgrade to the fixed version with the command below.

pip install --upgrade 'django>=1.11.15'

Details

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

Are you affected?

Enter the version of the package you're using.

Affected packages

Introduced in: 2.0Fixed in: 2.0.8

Fixpip install --upgrade 'django>=1.11.15'

References

https://www.djangoproject.com/weblog/2018/aug/01/security-releases/[ARTICLE]
https://usn.ubuntu.com/3726-1/[WEB]
http://www.securitytracker.com/id/1041403[WEB]
https://www.debian.org/security/2018/dsa-4264[ADVISORY]
http://www.securityfocus.com/bid/104970[WEB]
https://access.redhat.com/errata/RHSA-2019:0265[ADVISORY]
https://github.com/advisories/GHSA-5hg3-6c2f-f3wr[ADVISORY]