[ubuntu-cloud-archive/icehouse-proposed] python-django (Accepted)
James Page
james.page at ubuntu.com
Fri Jul 10 12:06:20 UTC 2015
python-django (1.6.1-2ubuntu0.9~cloud0) precise-icehouse; urgency=medium
.
* New update for the Ubuntu Cloud Archive.
.
python-django (1.6.1-2ubuntu0.9) trusty-security; urgency=medium
.
* SECURITY UPDATE: denial of service via empty session records
- debian/patches/CVE-2015-5143.patch: avoid creating a session record
when loading the session in
django/contrib/sessions/backends/cache.py,
django/contrib/sessions/backends/cached_db.py,
django/contrib/sessions/backends/db.py,
django/contrib/sessions/backends/file.py,
added test to django/contrib/sessions/tests.py.
- CVE-2015-5143
* SECURITY UPDATE: header injection via newlines
- debian/patches/CVE-2015-5144.patch: check for newlines in
django/core/validators.py, added tests to tests/validators/tests.py.
- CVE-2015-5144
Date: Fri, 10 Jul 2015 03:03:48 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>
More information about the Cloud-archive-changes
mailing list