[ubuntu-cloud-archive/kilo-proposed] python-django (Accepted)

Cloud Archive noreply at ubuntu.com
Wed Aug 19 20:37:32 UTC 2015


 python-django (1.7.6-1ubuntu2.2~cloud0) trusty-kilo; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 python-django (1.7.6-1ubuntu2.2) vivid-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service by filling session store
     - debian/patches/CVE-2015-596x.patch: don't create empty sessions in
       django/contrib/sessions/backends/base.py,
       django/contrib/sessions/backends/cached_db.py,
       django/contrib/sessions/middleware.py, added tests to
       django/contrib/sessions/tests.py, updated docs in
       docs/topics/http/sessions.txt.
     - CVE-2015-5963
     - CVE-2015-5964

Date: Wed, 19 Aug 2015 06:55:36 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Cloud Archive <noreply at ubuntu.com>


More information about the Cloud-archive-changes mailing list