Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-24583 →
DEBIAN-CVE-2020-24583
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISS...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
python-django
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.16-1"}]}]
Debian:13
python-django
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.16-1"}]}]
Debian:14
python-django
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.16-1"}]}]
Références
- advisory security-tracker.debian.org