[Bug 1417274] Re: CVE-2015-0221 backport broke serving static content through GZipMiddleware

Launchpad Bug Tracker 1417274 at bugs.launchpad.net
Wed Feb 4 18:03:12 UTC 2015


This bug was fixed in the package python-django - 1.1.1-2ubuntu1.16

---------------
python-django (1.1.1-2ubuntu1.16) lucid-security; urgency=medium

  * SECURITY REGRESSION: static serve failure (LP: #1417274)
    - debian/patches/CVE-2015-0221-regression.patch: allow GZipMiddleware
      to work with streaming responses in django/middleware/gzip.py,
      django/utils/text.py, django/http/__init__.py, added tests to
      tests/regressiontests/middleware/tests.py.
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Wed, 04 Feb 2015 10:08:10 -0500

** Changed in: python-django (Ubuntu Lucid)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-django in Ubuntu.
https://bugs.launchpad.net/bugs/1417274

Title:
  CVE-2015-0221 backport broke serving static content through
  GZipMiddleware

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-django/+bug/1417274/+subscriptions



More information about the Ubuntu-server-bugs mailing list