Format: 1.8
Date: Wed, 14 May 2014 11:15:43 -0700
Source: python-django
Binary: python-django python-django-doc
Architecture: all i386_translations
Version: 1.3.1-4ubuntu1.11
Distribution: precise
Urgency: medium
Maintainer: Ubuntu/amd64 Build Daemon <buildd@lamiak.buildd>
Changed-By: Seth Arnold <seth.arnold@canonical.com>
Description: 
 python-django - High-level Python web development framework
 python-django-doc - High-level Python web development framework (documentation)
Launchpad-Bugs-Fixed: 1317663
Changes: 
 python-django (1.3.1-4ubuntu1.11) precise-security; urgency=medium
 .
   * SECURITY UPDATE: cache coherency problems in old Internet Explorer
     compatibility functions lead to loss of privacy and cache poisoning
     attacks. (LP: #1317663)
     - debian/patches/drop_fix_ie_for_vary_1_4.diff: remove fix_IE_for_vary()
       and fix_IE_for_attach() functions so Cache-Control and Vary headers are
       no longer modified. This may introduce some regressions for IE 6 and IE 7
       users. Patch from upstream.
     - CVE-2014-1418
   * SECURITY UPDATE: The validation for redirects did not correctly validate
     some malformed URLs, which are accepted by some browsers. This allows a
     user to be redirected to an unsafe URL unexpectedly.
     - debian/patches/is_safe_url_1_4.diff: Forbid URLs starting with '///',
       forbid URLs without a host but with a path. Patch from upstream.
Checksums-Sha1: 
 b249986bdbd484aa4ecd56ed6e73773e9779810f 4274482 python-django_1.3.1-4ubuntu1.11_all.deb
 859220994fec4d1a9ef008769880b963bb89e79f 2135068 python-django-doc_1.3.1-4ubuntu1.11_all.deb
 dfda11897c8f577a64ec2b64e08fed6a72504463 5801834 python-django_1.3.1-4ubuntu1.11_i386_translations.tar.gz
Checksums-Sha256: 
 a32d9de2c387a9429548c9bce51e7b7f7bca6fc37ebc22213771e8a87f128eb4 4274482 python-django_1.3.1-4ubuntu1.11_all.deb
 1bc293d674e01bb1ccd0e6538c6f5eed08889286ea3a4f4ed3945938bda7d1e9 2135068 python-django-doc_1.3.1-4ubuntu1.11_all.deb
 0c5a9116f68578abbd093a2bfb6551e501e45d1efa84e6429fd564f8a61cdc4f 5801834 python-django_1.3.1-4ubuntu1.11_i386_translations.tar.gz
Files: 
 053cb66f60444138eeeca2ce371adc9c 4274482 python optional python-django_1.3.1-4ubuntu1.11_all.deb
 7d5b59b4eca40db440012cf3ce5431fa 2135068 doc optional python-django-doc_1.3.1-4ubuntu1.11_all.deb
 119c6862ac842ca6c47762e441f8be0d 5801834 raw-translations - python-django_1.3.1-4ubuntu1.11_i386_translations.tar.gz
Original-Maintainer: Chris Lamb <lamby@debian.org>