Security releases issued

Re:Security releases issued by oellegaard on Tuesday February 19, 2013 @04:51PM (#5247294)

For a second I got scared. Then I saw the fixes and realized that I don't have to panic-update. It is great that the issues are fixed but none of them seem very dangerous. DoS can always be done and I doubt many people use the XML serializer/admin log. Not sure about how many people use get_host(), but I imagine its not a lot of people.

[ Parent | on HN ]

Re:Security releases issued by daenz on Tuesday February 19, 2013 @05:02PM (#5247353)

> DoS can always be done

Assume you're not talking about DDoS, how?

[ Parent | on HN ]

Re:Security releases issued by StavrosK on Wednesday February 20, 2013 @07:23AM (#5250027)

I've always wondered: What stops someone from uploading a 10 GB file using Django's upload forms? The file could even be very small when gzipped, it sounds like a reasonable and easy DoS attack.

[ Parent | on HN ]

Re:Security releases issued by mpyne on Tuesday February 19, 2013 @11:42PM (#5249001)

Piss off the wrong person, normally...

[ Parent | on HN ]