News for hackers. Stuff that matters.

A comment on Security releases issued. Parent comment

Re:Security releases issued by _carljm on Tuesday February 19, 2013 @07:08PM (#5248062)
You're right, thanks for pointing this out. Although (as jacobian mentions) Django's exposure in general to these attacks was quite limited, we still shouldn't describe these XML vulnerabilities as DoS-only.

I'm working on updates to the release announcement and release notes for 1.3.6 and 1.4.4 to make this clearer.

[ Parent | on HN ]
Re:Security releases issued by _carljm on Tuesday February 19, 2013 @08:44PM (#5248453)
The advisory and release notes are now fixed to not describe the XML vulnerabilities as DoS.
[ Parent | on HN ]