Format: 1.8
Date: Wed, 26 Apr 2023 10:03:19 -0400
Source: python-django
Binary: python-django-doc python3-django
Architecture: all amd64_translations
Version: 2:2.2.12-1ubuntu0.17
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos03-amd64-045.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 python-django-doc - High-level Python web development framework (documentation)
 python3-django - High-level Python web development framework
Changes:
 python-django (2:2.2.12-1ubuntu0.17) focal-security; urgency=medium
 .
   * SECURITY UPDATE: Potential bypass of validation when uploading multiple
     files using one form field
     - debian/patches/CVE-2023-31047.patch: prevent uploading multiple files
       in django/forms/widgets.py, docs/topics/http/file-uploads.txt,
       tests/forms_tests/field_tests/test_filefield.py,
       tests/forms_tests/widget_tests/test_clearablefileinput.py,
       tests/forms_tests/widget_tests/test_fileinput.py.
     - CVE-2023-31047
Checksums-Sha1:
 88b867bc7781f8c5a13efbf5a21477c9a1330542 3145200 python-django-doc_2.2.12-1ubuntu0.17_all.deb
 d49c7eb6f6f206aef2dcb49fd8a837c63dda228d 14148 python-django_2.2.12-1ubuntu0.17_amd64.buildinfo
 039a8aa3f823007bfca3d84695c9a6799bb153b3 3628898 python-django_2.2.12-1ubuntu0.17_amd64_translations.tar.gz
 c89613f997386143311ff4cdb00de7823bfc7778 2667368 python3-django_2.2.12-1ubuntu0.17_all.deb
Checksums-Sha256:
 302fd1cc0f98cca55290f526409bc2b4079306187aa1a32b80820a22d356319c 3145200 python-django-doc_2.2.12-1ubuntu0.17_all.deb
 0fe8c12533f21330ea7315b8136c81e9684f8c92b4e1051a063cea1ee5624e95 14148 python-django_2.2.12-1ubuntu0.17_amd64.buildinfo
 c2a6b563cc3b74e8becc90cce74aa1bef41a1883f0f3d953c4f0ce73be5cae2c 3628898 python-django_2.2.12-1ubuntu0.17_amd64_translations.tar.gz
 ec53152631309a5f6c773f013f1106fca34ef557737cbad0c5ab85941e5c708c 2667368 python3-django_2.2.12-1ubuntu0.17_all.deb
Files:
 a5055158d6183e0da48858f6d62aa94b 3145200 doc optional python-django-doc_2.2.12-1ubuntu0.17_all.deb
 c7edb727b0e64be2b1da92fe9e1406f2 14148 python optional python-django_2.2.12-1ubuntu0.17_amd64.buildinfo
 c3b2213a630e6ca1e03bce9a687f97ff 3628898 raw-translations - python-django_2.2.12-1ubuntu0.17_amd64_translations.tar.gz
 77b37e8ac41004582a61de841b4d8aab 2667368 python optional python3-django_2.2.12-1ubuntu0.17_all.deb
Original-Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>