Ubuntu
python-django package

python-django 1.7.6-1ubuntu2.1 source package in Ubuntu

Changelog

python-django (1.7.6-1ubuntu2.1) vivid-security; urgency=medium

  * SECURITY UPDATE: denial of service via empty session records
    - debian/patches/CVE-2015-5143.patch: avoid creating a session record
      when loading the session in
      django/contrib/sessions/backends/cache.py,
      django/contrib/sessions/backends/cached_db.py,
      django/contrib/sessions/backends/db.py,
      django/contrib/sessions/backends/file.py,
      added test to django/contrib/sessions/tests.py.
    - CVE-2015-5143
  * SECURITY UPDATE: header injection via newlines
    - debian/patches/CVE-2015-5144.patch: check for newlines in
      django/core/validators.py, added tests to tests/validators/tests.py.
    - CVE-2015-5144

 -- Marc Deslauriers <email address hidden>  Thu, 02 Jul 2015 10:53:48 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Vivid
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Vivid: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-django_1.7.6.orig.tar.gz 7.2 MiB b0f15e0ffe59a2f37cbaf53543f05d2f40c5a755390df03ec0655b5e4a8d4c90
python-django_1.7.6-1ubuntu2.1.debian.tar.xz 27.1 KiB d7f1275a5e142821318e0d57b17bb86dbc5063c15793d46a68ad3ed5a9718f53
python-django_1.7.6-1ubuntu2.1.dsc 2.7 KiB 08a552d90be36ccfa41f0bb90f8dca3441474b08655009617c144f880df94d3b

View changes file

Binary packages built by this source

python-django: No summary available for python-django in ubuntu vivid.

No description available for python-django in ubuntu vivid.

python-django-common: No summary available for python-django-common in ubuntu vivid.

No description available for python-django-common in ubuntu vivid.

python-django-doc: No summary available for python-django-doc in ubuntu vivid.

No description available for python-django-doc in ubuntu vivid.

python3-django: No summary available for python3-django in ubuntu vivid.

No description available for python3-django in ubuntu vivid.