[ubuntu-cloud-archive/kilo-proposed] python-django (Accepted)

[James Page]

 python-django (1.7.6-1ubuntu2~cloud0) trusty-kilo; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 python-django (1.7.6-1ubuntu2) vivid; urgency=medium
 .
   * SECURITY UPDATE: denial-of-service possibility with strip_tags
     - debian/patches/CVE-2015-2316.patch: fix infinite loop possibility
       in django/utils/html.py, added test to
       tests/utils_tests/test_html.py.
     - CVE-2015-2316
   * SECURITY UPDATE: XSS attack via user-supplied redirect URLs
     - debian/patches/CVE-2015-2317.patch: reject URLs that start with
       control characters in django/utils/http.py, added test to
       tests/utils_tests/test_http.py.
     - CVE-2015-2317

Date: Sat, 21 Mar 2015 09:02:25 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>