[ubuntu/bionic-security] python-django 1:1.11.11-1ubuntu1.17 (Accepted)

[Marc Deslauriers]

python-django (1:1.11.11-1ubuntu1.17) bionic-security; urgency=medium

  * SECURITY UPDATE: Potential SQL injection in QuerySet.annotate(),
    aggregate(), and extra() 
    - debian/patches/CVE-2022-28346.patch: prevent SQL injection in column
      aliases in django/db/models/sql/query.py, tests/aggregation/tests.py,
      tests/annotations/tests.py, tests/queries/tests.py,
      tests/expressions/test_queryset_values.py.
    - CVE-2022-28346
  * SECURITY UPDATE: header injection in URLValidator with Python security
    update
    - debian/patches/CVE-2021-32052.patch: prevent newlines and tabs from
      being accepted in URLValidator in django/core/validators.py,
      tests/validators/tests.py.
    - CVE-2021-32052

Date: 2022-04-06 12:34:11.253150+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.17
-------------- next part --------------
Sorry, changesfile not available.