[ubuntu-cloud-archive/icehouse-proposed] python-django (Accepted)

[James Page]

 python-django (1.6.1-2ubuntu0.2~cloud0) precise-icehouse; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 python-django (1.6.1-2ubuntu0.2) trusty-security; urgency=medium
 .
   * SECURITY REGRESSION: security fix regression when a view is a partial
     (LP: #1311433)
     - debian/patches/CVE-2014-0472-regression.patch: create the lookup_str
       from the original function whenever a partial is provided as an
       argument to a url pattern in django/core/urlresolvers.py,
       added tests to tests/urlpatterns_reverse/urls.py,
       tests/urlpatterns_reverse/views.py.
     - CVE-2014-0472
 .
 python-django (1.6.1-2ubuntu0.1) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: unexpected code execution using reverse()
     (LP: #1309779)
     - debian/patches/CVE-2014-0472.patch: added filtering to
       django/core/urlresolvers.py, added tests to
       tests/urlpatterns_reverse/nonimported_module.py,
       tests/urlpatterns_reverse/tests.py,
       tests/urlpatterns_reverse/urls.py,
       tests/urlpatterns_reverse/views.py.
     - CVE-2014-0472
   * SECURITY UPDATE: caching of anonymous pages could reveal CSRF token
     (LP: #1309782)
     - debian/patches/CVE-2014-0473.patch: don't cache responses with a
       cookie in django/middleware/cache.py, added tests to
       tests/cache/tests.py.
     - CVE-2014-0473
   * SECURITY UPDATE: MySQL typecasting issue (LP: #1309784)
     - debian/patches/CVE-2014-0474.patch: convert arguments to correct
       type in django/db/models/fields/__init__.py, updated docs in
       docs/howto/custom-model-fields.txt, docs/ref/databases.txt,
       docs/ref/models/querysets.txt, docs/topics/db/sql.txt, added tests to
       tests/model_fields/tests.py.
     - CVE-2014-0474

Date: Thu, 24 Apr 2014 00:08:12 -0400
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>