Ubuntu
python-django package

python-django 1.6.6-1ubuntu2.3 source package in Ubuntu

Changelog

python-django (1.6.6-1ubuntu2.3) utopic-security; urgency=medium

  * SECURITY UPDATE: denial of service via empty session records
    - debian/patches/CVE-2015-5143.patch: avoid creating a session record
      when loading the session in
      django/contrib/sessions/backends/cache.py,
      django/contrib/sessions/backends/cached_db.py,
      django/contrib/sessions/backends/db.py,
      django/contrib/sessions/backends/file.py,
      added test to django/contrib/sessions/tests.py.
    - CVE-2015-5143
  * SECURITY UPDATE: header injection via newlines
    - debian/patches/CVE-2015-5144.patch: check for newlines in
      django/core/validators.py, added tests to tests/validators/tests.py.
    - CVE-2015-5144

 -- Marc Deslauriers <email address hidden>  Thu, 02 Jul 2015 11:06:40 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Utopic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Utopic: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
python-django_1.6.6.orig.tar.gz 6.3 MiB 536cbd54e533ba3563d205f0c91988b24e7d74b8b253d7825e42214b50ba7e90
python-django_1.6.6-1ubuntu2.3.debian.tar.xz 30.0 KiB 1a3becabf542d5a659c7715300ffff268d8526976eb6ae45e297337b2ecb581d
python-django_1.6.6-1ubuntu2.3.dsc 2.5 KiB 166a57e9a30fbb90da84787c8389cb3041ff2817f1759ecb7e3ba70186b1f93f

View changes file

Binary packages built by this source

python-django: No summary available for python-django in ubuntu utopic.

No description available for python-django in ubuntu utopic.

python-django-common: No summary available for python-django-common in ubuntu utopic.

No description available for python-django-common in ubuntu utopic.

python-django-doc: No summary available for python-django-doc in ubuntu utopic.

No description available for python-django-doc in ubuntu utopic.

python3-django: No summary available for python3-django in ubuntu utopic.

No description available for python3-django in ubuntu utopic.