python-django (1.8.7-1ubuntu3) xenial; urgency=medium * SECURITY REGRESSION: is_safe_url() with non-unicode url (LP: #1553251) - debian/patches/CVE-2016-2512-regression.patch: force url to unicode in django/utils/http.py, added test to tests/utils_tests/test_http.py. - CVE-2016-2512
Date: Fri, 04 Mar 2016 11:03:43 -0500 Changed-By: Marc Deslauriers <marc.deslauri...@ubuntu.com> Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com> https://launchpad.net/ubuntu/+source/python-django/1.8.7-1ubuntu3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Mar 2016 11:03:43 -0500 Source: python-django Binary: python-django python3-django python-django-common python-django-doc Architecture: source Version: 1.8.7-1ubuntu3 Distribution: xenial Urgency: medium Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com> Changed-By: Marc Deslauriers <marc.deslauri...@ubuntu.com> Description: python-django - High-level Python web development framework (Python 2 version) python-django-common - High-level Python web development framework (common) python-django-doc - High-level Python web development framework (documentation) python3-django - High-level Python web development framework (Python 3 version) Launchpad-Bugs-Fixed: 1553251 Changes: python-django (1.8.7-1ubuntu3) xenial; urgency=medium . * SECURITY REGRESSION: is_safe_url() with non-unicode url (LP: #1553251) - debian/patches/CVE-2016-2512-regression.patch: force url to unicode in django/utils/http.py, added test to tests/utils_tests/test_http.py. - CVE-2016-2512 Checksums-Sha1: 5231c121b3543d07208ad622ef370b187e50c8e1 2787 python-django_1.8.7-1ubuntu3.dsc a4de8dc2d82b87925cdad921e0aaec308ea9623f 30004 python-django_1.8.7-1ubuntu3.debian.tar.xz Checksums-Sha256: a37cd24f13f256ed35563451e2fc1674f334dd560e71c3ed6f3322f2ec95a7af 2787 python-django_1.8.7-1ubuntu3.dsc a1c22d1fed0136c284845e4cf3363c3dc9377e146e2486930893b0b55b0572c4 30004 python-django_1.8.7-1ubuntu3.debian.tar.xz Files: 09a2ed6cf0d2994575952e4127a1199a 2787 python optional python-django_1.8.7-1ubuntu3.dsc 8afd2a3af882a1e20e0af4f4847983fd 30004 python optional python-django_1.8.7-1ubuntu3.debian.tar.xz Original-Maintainer: Debian Python Modules Team <python-modules-t...@lists.alioth.debian.org> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJW2b+1AAoJEGVp2FWnRL6TXysP/3w807mz3ElE5hFbqGuHv5/m CcEAVHPP0nfwx1EVDq8rSoBX3KntaLhr2+lyzCadenrAqRJORrrAjf2b9uzdxoeu mXtQNw9ciiUqaBIGn/dp4Ikcysj65zvk48ZRR0hiw0nevU4DKXQZoIM6+5HGSj6x YZwL0TXbGNQsHrOK6Yx+eLxTQ59LQy93Lk7M/CHDchns0bQH+5LrBrZCAiJJE6Zg GKUj264QgheWP1j2SteAavKcfxDf6Zi8EtsVB/CO46/KTkkpQuHepgBJqilsm9pc xwdmEVBT8IF/GK/g6nEJNvgaMIjeIQZwzR2/P6yAJaQB3H/SrgO+IJMEg6G+OF4z YrdrpavSKCP50irY412tyNieOeQP/bxjVIlWfy2VtBm9LEIoUeRmJ503tJN1Bpgx xOWGU1dgP8xXY39sW0luXo0y60Nh6+PrtvmcEiXWQ8/3cE7WaDrTUh/1LOxrCbk2 +l0o1s8z07o/JZd6tzUHt6kWu2iHyTjNsJ2rv5Ftfb+X/vxEM0cjsr0/uUKg9hEP vtPVeLZ/DCSoMgUXUXetK0Nq2IDp30BHk8hB9ckDIHyk4HjXMBaukQk3HwcnwWz6 52j2uxwtCfj/Tm/LkP/44YLJxVKpOVTQ/8anD9uqavp+674X4uFYBaXd9yQSSCN3 tOMAMtw3TYK3v9QCqUlj =SsJg -----END PGP SIGNATURE-----
-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes