Re: Re: CVE request for Django-piston and Tastypie

[Kurt Seifried <kseifried () redhat com>]

On 11/01/2011 07:35 PM, David Black wrote:
> The Tastypie announcement can be found at
> http://groups.google.com/group/django-tastypie/browse_thread/thread/8b668d1831d35012
>
> and the patch to fix this bug can be found at
> https://github.com/toastdriven/django-tastypie/commit/e8af315211b07c8f48f32a063233cc3f76dd5bc2
Thanks, first hand info is much better. Please use CVE-2011-4104 for
this issue.

-- 

-Kurt Seifried / Red Hat Security Response Team