angler-fishThe Vulnerability History Project

[1.4.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USE change.

      This is a security fix. Disclosure following shortly.
by Stephanie the Shih Tzu 2014-08-11 16:04:53 UTC
commit c9e3b9949cd55f090591fbdc4a114fcb8368b6d9
Django Fix CVE-2014-0482
django/contrib/auth/middleware.py
+3 -25
django/contrib/auth/tests/remote_user.py
-18
docs/releases/1.4.14.txt
-9
expand_less