angler-fishThe Vulnerability History Project

[1.5.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USE change.

      This is a security fix. Disclosure following shortly.
by Stephanie the Shih Tzu 2014-08-11 16:04:53 UTC
commit dd68f319b365f6cb38c5a6c106faf4f6142d7d88
Django Fix CVE-2014-0482
django/contrib/auth/middleware.py
+8 -20
django/contrib/auth/tests/remote_user.py
-18
docs/releases/1.4.14.txt
-9
docs/releases/1.5.9.txt
-9
expand_less