python-django 1.4.1-2ubuntu0.3 source package in Ubuntu
Changelog
python-django (1.4.1-2ubuntu0.3) quantal-security; urgency=low * SECURITY UPDATE: host header poisoning (LP: #1089337) - debian/patches/fix_get_host.patch: tighten host header validation in django/http/__init__.py, add info to docs/topics/security.txt, add tests to tests/regressiontests/requests/tests.py. - https://www.djangoproject.com/weblog/2012/dec/10/security/ - No CVE number * SECURITY UPDATE: redirect poisoning (LP: #1089337) - debian/patches/fix_redirect_poisoning.patch: tighten validation in django/contrib/auth/views.py, django/contrib/comments/views/comments.py, django/contrib/comments/views/moderation.py, django/contrib/comments/views/utils.py, django/utils/http.py, django/views/i18n.py, add tests to tests/regressiontests/comment_tests/tests/comment_view_tests.py, tests/regressiontests/comment_tests/tests/moderation_view_tests.py, tests/regressiontests/views/tests/i18n.py. - https://www.djangoproject.com/weblog/2012/dec/10/security/ - No CVE number * SECURITY UPDATE: host header poisoning (LP: #1130445) - debian/patches/add_allowed_hosts.patch: add new ALLOWED_HOSTS setting to django/conf/global_settings.py, django/conf/project_template/project_name/settings.py, django/contrib/auth/tests/views.py, django/contrib/contenttypes/tests.py, django/contrib/sites/tests.py, django/http/__init__.py, django/test/utils.py, add docs to docs/ref/settings.txt, docs/topics/security.txt, add tests to tests/regressiontests/csrf_tests/tests.py, tests/regressiontests/requests/tests.py. - https://www.djangoproject.com/weblog/2013/feb/19/security/ - No CVE number * SECURITY UPDATE: XML attacks (LP: #1130445) - debian/patches/CVE-2013-166x.patch: forbid DTDs, entity expansion, and external entities/DTDs in django/core/serializers/xml_serializer.py, add tests to tests/regressiontests/serializers_regress/tests.py. - https://www.djangoproject.com/weblog/2013/feb/19/security/ - CVE-2013-1664 - CVE-2013-1665 * SECURITY UPDATE: Data leakage via admin history log (LP: #1130445) - debian/patches/CVE-2013-0305.patch: add permission checks to history view in django/contrib/admin/options.py, add tests to tests/regressiontests/admin_views/tests.py. - https://www.djangoproject.com/weblog/2013/feb/19/security/ - CVE-2013-0305 * SECURITY UPDATE: Formset denial-of-service (LP: #1130445) - debian/patches/CVE-2013-0306.patch: limit maximum number of forms in django/forms/formsets.py, add docs to docs/topics/forms/formsets.txt, docs/topics/forms/modelforms.txt, add tests to tests/regressiontests/forms/tests/formsets.py, tests/regressiontests/generic_inline_admin/tests.py. - https://www.djangoproject.com/weblog/2013/feb/19/security/ - CVE-2013-0306 -- Marc Deslauriers <email address hidden> Mon, 04 Mar 2013 08:28:36 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Quantal
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- python
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
python-django_1.4.1.orig.tar.gz | 7.3 MiB | 4d8d20eba350d3d29613cc5a6302d5c23730c7f9e150985bc58b3175b755409b |
python-django_1.4.1-2ubuntu0.3.debian.tar.gz | 41.3 KiB | 1fbb277612f6a0e8c86b56811346385f648f647900a264dd6504866f1e34bcfd |
python-django_1.4.1-2ubuntu0.3.dsc | 2.3 KiB | 5295f4bb06004f4dc99eb6c94a6594856d469aba8d0fed4ec8f5a964c0b8ff53 |
Available diffs
Binary packages built by this source
- python-django: No summary available for python-django in ubuntu quantal.
No description available for python-django in ubuntu quantal.
- python-django-doc: No summary available for python-django-doc in ubuntu quantal.
No description available for python-django-doc in ubuntu quantal.