[ubuntu-cloud-archive/kilo-updates] python-django (Accepted)

James Page james.page at ubuntu.com
Wed Jul 15 19:13:09 UTC 2015

 python-django (1.7.6-1ubuntu2.1~cloud0) trusty-kilo; urgency=medium
   * New update for the Ubuntu Cloud Archive.
 python-django (1.7.6-1ubuntu2.1) vivid-security; urgency=medium
   * SECURITY UPDATE: denial of service via empty session records
     - debian/patches/CVE-2015-5143.patch: avoid creating a session record
       when loading the session in
       added test to django/contrib/sessions/tests.py.
     - CVE-2015-5143
   * SECURITY UPDATE: header injection via newlines
     - debian/patches/CVE-2015-5144.patch: check for newlines in
       django/core/validators.py, added tests to tests/validators/tests.py.
     - CVE-2015-5144

Date: Fri, 10 Jul 2015 07:03:45 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>

More information about the Cloud-archive-changes mailing list