python-django 1.6.1-2ubuntu0.3 source package in Ubuntu
Changelog
python-django (1.6.1-2ubuntu0.3) trusty-security; urgency=medium * SECURITY UPDATE: cache coherency problems in old Internet Explorer compatibility functions lead to loss of privacy and cache poisoning attacks. (LP: #1317663) - debian/patches/drop_fix_ie_for_vary_1_6.diff: remove fix_IE_for_vary() and fix_IE_for_attach() functions so Cache-Control and Vary headers are no longer modified. This may introduce some regressions for IE 6 and IE 7 users. Patch from upstream. - CVE-2014-1418 * SECURITY UPDATE: The validation for redirects did not correctly validate some malformed URLs, which are accepted by some browsers. This allows a user to be redirected to an unsafe URL unexpectedly. - debian/patches/is_safe_url_1_6.diff: Forbid URLs starting with '///', forbid URLs without a host but with a path. Patch from upstream. -- Seth Arnold <email address hidden> Wed, 14 May 2014 10:27:37 -0700
Upload details
- Uploaded by:
- Seth Arnold
- Uploaded to:
- Trusty
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- python
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
python-django_1.6.1.orig.tar.gz | 6.3 MiB | cf011874f54a16e7452e0fe1e7f4ec144b95b47ecf31766c9f1f8cf438f09c06 |
python-django_1.6.1-2ubuntu0.3.debian.tar.gz | 31.2 KiB | df0c192115c1a44bf44e5443c478e643cf4d48d0994039e65f60a8a8a15ef373 |
python-django_1.6.1-2ubuntu0.3.dsc | 1.9 KiB | b29e02ba61732cbbb32d3e4a86ecfdc3f1f001f025705a6a85b1269779df2459 |
Available diffs
Binary packages built by this source
- python-django: No summary available for python-django in ubuntu utopic.
No description available for python-django in ubuntu utopic.
- python-django-doc: No summary available for python-django-doc in ubuntu utopic.
No description available for python-django-doc in ubuntu utopic.