Accepted python-django 0.95.1-1 (source)

Ubuntu Installer archive at ubuntu.com
Mon Jan 22 15:32:13 GMT 2007


Accepted:
 OK: python-django_0.95.1-1.dsc
     -> Component: universe Section: python
 OK: python-django_0.95.1.orig.tar.gz
 OK: python-django_0.95.1-1.diff.gz

Origin: Debian/unstable
Format: 1.7
Date: Mon,  22 Jan 2007 15:28:27 +0000
Source: python-django
Binary: python-django
Architecture: source
Version: 0.95.1-1
Distribution: feisty
Urgency: low
Maintainer: Brett Parker <iDunno at sommitrealweird.co.uk>
Changed-By: Daniel T Chen <crimsun at fungus.sh.nu>
Description: 
 python-django - A high-level Python Web framework
Closes: 403761 407489 407519 407521 407607 407786
Changes: 
 python-django (0.95.1-1) unstable; urgency=low
 .
   [ Brett Parker ]
   * New upstream minor release for security bugs:
     - http://www.djangoproject.com/weblog/2007/jan/21/0951/
       - Fixes a small security vulnerability in the script Django's
         internationalization system uses to compile translation files
         (changeset 4360 in the "0.95-bugfixes" branch).
       - fix for a bug in Django's authentication middleware which could cause
         apparent "caching" of a logged-in user (changeset 4361).
       - patch which disables debugging mode in the flup FastCGI package Django
         uses to launch its FastCGI server, which prevents tracebacks from
         bubbling up during production use (changeset 4363).
     Closes: #407786, #407607
   * Sets Recommends to python-psycopg and moves other database engines to
     the Suggests field.
 .
   [ Raphael Hertzog ]
   * Use python-pysqlite2 as default database engine in Recommends. Others are
     in Suggests. Closes: #403761
   * Add python-psycopg2 in Suggests. Closes: #407489
 .
 python-django (0.95-3) unstable; urgency=low
 .
   * Integrate 2 upstream changesets:
     - http://code.djangoproject.com/changeset/3754 as
       debian/patches/04_sec_fix_auth.diff
       Fixes a possible case of mis-authentication due to bad caching.
       Closes: #407521
     - http://code.djangoproject.com/changeset/3592 as
       debian/patches/03_sec_fix_compile-messages.diff
       Fixes an (unlikely) arbitrary command execution if the user is blindly
       running compile-messages.py on a untrusted set of *.po files.
       Closes: #407519
Files: 
 cc4f46e10156431c73eef450f6293663 886 python optional python-django_0.95.1-1.dsc
 07f09d8429916481e09e84fd01e97355 1297839 python optional python-django_0.95.1.orig.tar.gz
 10f4d6bf948b13fc5340fc36bff6ce39 3688 python optional python-django_0.95.1-1.diff.gz





More information about the feisty-changes mailing list