2020년 3월 25일 보안정보 스크래핑

2020년 3월 25일 보안정보 스크래핑 3월 25일 보안정보 스크래핑 ==================================================================== + 주요 취약점 - 메일전송 프로토콜을 이용한 원격 명령어 실행 주의 권고 외 1건 1. 메일전송 프로토콜을 이용한 원격 명령어 실행 주의 권고 최근 OpenSMTPD* 취약점이 발견되는 등 메일전송 프로토콜에서 원격 명령어 실행이 가능하여 주의를 권고함 공격자는 취약점을 악용하여 피해를 발생시킬 수 있으므로, 해결방안을 참고하여 조치 필요 - https://www.krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=35302 2. Django 제품 SQL Injection 취약점 보안 업데이트 권고 최근 Django*에서 SQL Injection취약점(CVE-2020-9402)을 악용할 수 있는 개념증명코드(Proof of concept, PoC)가 인터넷상에 공개되어 사용자의 보안 업데이트 필요 - https://www.krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=35301 ==================================================================== + 취약점 - Apple Safari 취약점 1. Apple Safari 취약점 Apple Safari security bypass CVE-2020-3885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178339 Apple Safari security bypass CVE-2020-3887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/178338 Apple Safari inform...

import name 'python_2_unicode_compatible' from 'django.utils.encoding'

import name 'python_2_unicode_compatible' from 'django.utils.encoding'

ImportError: cannot import name 'python_2_unicode_compatible' from 'django.utils.encoding'

Exception in thread django-main-thread: Traceback (most recent call last): File "C:\Users\jjs95\AppData\Local\Programs\Python\Python38-32\lib\threading.py", line 932, in _bootstrap_inner self.run() File "C:\Users\jjs95\AppData\Local\Programs\Python\Python38-32\lib\threading.py", line 870, in run self._target(*self._args, **self._kwargs) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\utils\autoreload.py", line 53, in wrapper fn(*args, **kwargs) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\core\management\commands\runserver.py", line 117, in inner_run self.check(display_num_errors=True) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\core\management\base.py", line 392, in check all_issues = self._run_checks( File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\core\management\base.py", line 382, in _run_checks return checks.run_checks(**kwargs) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\core\checks\registry.py", line 72, in run_checks new_errors = check(app_configs=app_configs) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\core\checks\urls.py", line 13, in check_url_config return check_resolver(resolver) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\core\checks\urls.py", line 23, in check_resolver return check_method() File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\urls\resolvers.py", line 407, in check for pattern in self.url_patterns: File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\utils\functional.py", line 48, in __get__ res = instance.__dict__[self.name] = self.func(instance) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\urls\resolvers.py", line 588, in url_patterns patterns = getattr(self.urlconf_module, "urlpatterns", self.urlconf_module) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\utils\functional.py", line 48, in __get__ res = instance.__dict__[self.name] = self.func(instance) File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\urls\resolvers.py", line 581, in urlconf_module return import_module(self.urlconf_name) File "C:\Users\jjs95\AppData\Local\Programs\Python\Python38-32\lib\importlib\__init__.py", line 127, in import_module return _bootstrap._gcd_import(name[level:], package, level) File "", line 1014, in _gcd_import File "", line 991, in _find_and_load File "", line 975, in _find_and_load_unlocked File "", line 671, in _load_unlocked File "", line 783, in exec_module File "", line 219, in _call_with_frames_removed File "C:\Users\jjs95\Desktop\intworld\project\intworldproject\urls.py", line 5, in import intworlduser.views File "C:\Users\jjs95\Desktop\intworld\project\intworlduser\views.py", line 4, in from .forms import UserCreationMultiForm File "C:\Users\jjs95\Desktop\intworld\project\intworlduser\forms.py", line 5, in from betterforms.multiform import MultiModelForm File "C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\betterforms\multiform.py", line 15, in from django.utils.encoding import python_2_unicode_compatible ImportError: cannot import name 'python_2_unicode_compatible' from 'django.utils.encoding' (C:\Users\jjs95\Desktop\intworld\myvenv\lib\site-packages\django\utils\encoding.py)

forms.py에서 사용한 from betterforms.multiform import MultiModelForm

이넘이 문제 같은데

파이썬 버전이 안 맞아서 그런가? 뭐지 계속 찾다가 페르시아 사이트까지 들어가게 되었다 ;

고치는 중..

from http://integer-ji.tistory.com/119 by ccl(A) rewrite - 2020-03-16 00:20:17

댓글

이 블로그의 인기 게시물

엑스브레인(XBrain) 기업 정보

django 설치 방법

[aws] deploy Angular app with s3 | AWS S3로 angular 앱 배포하기