python-django 2:3.2~alpha1-2 source package in Debian

Changelog

python-django (2:3.2~alpha1-2) experimental; urgency=medium

  * Apply security fix from upstream:

    - CVE-2021-23336: Prevent a web cache poisoning attack via "parameter
      cloaking". Django contains a copy of urllib.parse.parse_qsl() which was
      added to backport some security fixes. A further security fix has been
      issued recently such that parse_qsl() no longer allows using ";" as a
      query parameter separator by default. (Closes: #983090)

    <https://www.djangoproject.com/weblog/2021/feb/19/security-releases/>

 -- Chris Lamb <email address hidden>  Fri, 19 Feb 2021 09:28:42 +0000