[ubuntu-cloud-archive/icehouse-updates] python-django (Accepted)

[James Page]

 python-django (1.6.1-2ubuntu0.8~cloud0) precise-icehouse; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 python-django (1.6.1-2ubuntu0.8) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: denial-of-service possibility with strip_tags
     - debian/patches/CVE-2015-2316.patch: improve and fix infinite loop
       possibility in django/utils/html.py, added tests to
       tests/utils_tests/test_html.py, clarified documentation in
       docs/ref/templates/builtins.txt, docs/ref/utils.txt.
     - CVE-2015-2316
   * SECURITY UPDATE: XSS attack via user-supplied redirect URLs
     - debian/patches/CVE-2015-2317.patch: reject URLs that start with
       control characters in django/utils/http.py, added test to
       tests/utils_tests/test_http.py.
     - CVE-2015-2317
 .
 python-django (1.6.1-2ubuntu0.7) trusty-proposed; urgency=medium
 .
   * SRU LP: #1433376.
   * tests/utils_tests/test_jslex.py: Fix file encoding for python 2.7.9.

Date: Tue, 24 Mar 2015 03:05:22 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>