angler-fishThe Vulnerability History Project

[1.6.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USE change.

      This is a security fix. Disclosure following shortly.
by Stephanie the Shih Tzu 2014-08-11 16:04:53 UTC
commit 0268b855f9eab3377f2821164ef3e66037789e09
Django Fix CVE-2014-0482
django/contrib/auth/middleware.py
+8 -20
django/contrib/auth/tests/test_remote_user.py
-18
docs/releases/1.4.14.txt
-9
docs/releases/1.5.9.txt
-9
docs/releases/1.6.6.txt
-9
expand_less