Format: 1.8
Date: Wed, 14 May 2014 11:05:38 -0700
Source: python-django
Binary: python-django python-django-doc
Architecture: all i386_translations
Version: 1.4.1-2ubuntu0.7
Distribution: quantal
Urgency: medium
Maintainer: Ubuntu/amd64 Build Daemon <buildd@toyol.buildd>
Changed-By: Seth Arnold <seth.arnold@canonical.com>
Description: 
 python-django - High-level Python web development framework
 python-django-doc - High-level Python web development framework (documentation)
Launchpad-Bugs-Fixed: 1317663
Changes: 
 python-django (1.4.1-2ubuntu0.7) quantal-security; urgency=medium
 .
   * SECURITY UPDATE: cache coherency problems in old Internet Explorer
     compatibility functions lead to loss of privacy and cache poisoning
     attacks. (LP: #1317663)
     - debian/patches/drop_fix_ie_for_vary_1_4.diff: remove fix_IE_for_vary()
       and fix_IE_for_attach() functions so Cache-Control and Vary headers are
       no longer modified. This may introduce some regressions for IE 6 and IE 7
       users. Patch from upstream.
     - CVE-2014-1418
   * SECURITY UPDATE: The validation for redirects did not correctly validate
     some malformed URLs, which are accepted by some browsers. This allows a
     user to be redirected to an unsafe URL unexpectedly.
     - debian/patches/is_safe_url_1_4.diff: Forbid URLs starting with '///',
       forbid URLs without a host but with a path. Patch from upstream.
Checksums-Sha1: 
 40ee7212957a63088016eedf419802ba20b22811 5309420 python-django_1.4.1-2ubuntu0.7_all.deb
 196c9c48815566bc7c572b329179fdce613be0b1 2358600 python-django-doc_1.4.1-2ubuntu0.7_all.deb
 3a0f312feab4c5b18067d765f96d538e815a3c72 7931907 python-django_1.4.1-2ubuntu0.7_i386_translations.tar.gz
Checksums-Sha256: 
 926b88e7ee4ee4840bff5aa87c90d85a4c67b7218ce190a70a7c71f82d20c944 5309420 python-django_1.4.1-2ubuntu0.7_all.deb
 69bfd6418027c071882f1777fb411d917343b4d09c5acc8c6361a8df35449381 2358600 python-django-doc_1.4.1-2ubuntu0.7_all.deb
 06fc926705bc5ef4ebf03edd7d361acbe071aa46a3884dd102203bde8a84bcd7 7931907 python-django_1.4.1-2ubuntu0.7_i386_translations.tar.gz
Files: 
 4ee2e575e5a175b47220dbf9d2d34839 5309420 python optional python-django_1.4.1-2ubuntu0.7_all.deb
 dab007665413928da6058ac6562493f9 2358600 doc optional python-django-doc_1.4.1-2ubuntu0.7_all.deb
 b3b69db19f0c9b9275ecb345a3435927 7931907 raw-translations - python-django_1.4.1-2ubuntu0.7_i386_translations.tar.gz
Original-Maintainer: Chris Lamb <lamby@debian.org>