[ubuntu/eoan-security] python-django 1:1.11.22-1ubuntu1.3 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Wed Mar 4 12:19:29 UTC 2020


python-django (1:1.11.22-1ubuntu1.3) eoan-security; urgency=medium

  * SECURITY UPDATE: SQL injection in Oracle GIS functions and aggregates
    - debian/patches/CVE-2020-9402.patch: properly escaped tolerance
      parameter in GIS functions and aggregates on Oracle in
      django/contrib/gis/db/models/aggregates.py,
      django/contrib/gis/db/models/functions.py,
      tests/gis_tests/distapp/tests.py, tests/gis_tests/geoapp/tests.py.
    - CVE-2020-9402

Date: 2020-02-28 19:34:14.845044+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/python-django/1:1.11.22-1ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the Eoan-changes mailing list