[ubuntu-cloud-archive/kilo-updates] python-django (Accepted)

[James Page]

 python-django (1.7.6-1ubuntu2.1~cloud0) trusty-kilo; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 python-django (1.7.6-1ubuntu2.1) vivid-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service via empty session records
     - debian/patches/CVE-2015-5143.patch: avoid creating a session record
       when loading the session in
       django/contrib/sessions/backends/cache.py,
       django/contrib/sessions/backends/cached_db.py,
       django/contrib/sessions/backends/db.py,
       django/contrib/sessions/backends/file.py,
       added test to django/contrib/sessions/tests.py.
     - CVE-2015-5143
   * SECURITY UPDATE: header injection via newlines
     - debian/patches/CVE-2015-5144.patch: check for newlines in
       django/core/validators.py, added tests to tests/validators/tests.py.
     - CVE-2015-5144

Date: Fri, 10 Jul 2015 07:03:45 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>