Format: 1.8
Date: Thu, 06 Sep 2012 09:56:37 -0400
Source: python-django
Binary: python-django python-django-doc
Architecture: all i386_translations
Version: 1.1.1-2ubuntu1.5
Distribution: lucid
Urgency: low
Maintainer: Ubuntu/amd64 Build Daemon <buildd@roseapple.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 python-django - High-level Python web development framework
 python-django-doc - High-level Python web development framework (documentation)
Launchpad-Bugs-Fixed: 1031733 1031733 1031733
Changes: 
 python-django (1.1.1-2ubuntu1.5) lucid-security; urgency=low
 .
   * SECURITY UPDATE: Cross-site scripting in authentication views
     (LP: #1031733)
     - debian/patches/16_fix_cross_site_scripting_in_authentication.diff:
       fix unsafe redirects indjango/http/__init__.py. Patch backported from
       Debian Squeeze and fixed for python 2.4 compatibility.
     - CVE-2012-3442
   * SECURITY UPDATE: Denial-of-service in image validation (LP: #1031733)
     - debian/patches/17_fix_dos_in_image_validation.diff: call verify()
       immediately after the constructor in django/forms/fields.py.
     - CVE-2012-3443
   * SECURITY UPDATE: Denial-of-service via get_image_dimensions()
     (LP: #1031733)
     - debian/patches/18_fix_dos_via_get_image_dimensions.diff: don't limit
       chunk size in django/core/files/images.py.
     - CVE-2012-3444
Checksums-Sha1: 
 85422b3849e5908ead47f063f16d8ea02b6b1d13 3882836 python-django_1.1.1-2ubuntu1.5_all.deb
 b07382b317eb85b7a3a2404c82d883461d56ba34 1539768 python-django-doc_1.1.1-2ubuntu1.5_all.deb
 40bbca1ac61670c183edd49f91bc641798f88db5 3622517 python-django_1.1.1-2ubuntu1.5_i386_translations.tar.gz
Checksums-Sha256: 
 59df8bab484a1556a1e207c3329112340b5ccf00fadd0edd7f4867b4d19aa143 3882836 python-django_1.1.1-2ubuntu1.5_all.deb
 d35cf877547171119b2e4c9be4575a5585c53bed57071ba03c2e65fd586d98cc 1539768 python-django-doc_1.1.1-2ubuntu1.5_all.deb
 3a93b26be9a192607936735e4eeafcb87eb2e5ddd3dd69e58437f6a7c7610463 3622517 python-django_1.1.1-2ubuntu1.5_i386_translations.tar.gz
Files: 
 cc081ea1dc12e357b5c5fe2d10f95354 3882836 python optional python-django_1.1.1-2ubuntu1.5_all.deb
 701b358b05ea6cc957ea6add8a6740ef 1539768 doc optional python-django-doc_1.1.1-2ubuntu1.5_all.deb
 a7f443818109791e29f3814da52bc991 3622517 raw-translations - python-django_1.1.1-2ubuntu1.5_i386_translations.tar.gz
Original-Maintainer: Chris Lamb <lamby@debian.org>