python-django 1.2.3-1ubuntu0.2.11.04.1 source package in Ubuntu

Changelog

python-django (1.2.3-1ubuntu0.2.11.04.1) natty; urgency=low

  * SECURITY UPDATE: information leak in admin interface
    - debian/patches/07_security_admin_infoleak.diff: validate querystring
      lookup arguments either specify only fields on the model being viewed,
      or cross relations which have been explicitly whitelisted.
    - CVE-2010-XXXX
  * SECURITY UPDATE:
    - debian/patches/08_security_pasword_reset_dos.diff: adjust
      base36_to_int() function in django.utils.http will now validate the
      length of its input; on input longer than 13 digits (sufficient to
      base36-encode any 64-bit integer), it will now raise ValueError.
      Additionally, the default URL patterns for django.contrib.auth will now
      enforce a maximum length on the relevant parameters.
    - CVE-2010-XXXX
 -- Jamie Strandboge <email address hidden>   Mon, 03 Jan 2011 10:12:39 -0600