Format: 1.8
Date: Mon, 11 Apr 2022 08:16:53 -0400
Source: python-django
Binary: python-django-doc python3-django
Built-For-Profiles: noudeb
Architecture: all amd64_translations
Version: 2:3.2.12-2ubuntu1
Distribution: jammy-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@ubuntu>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 python-django-doc - High-level Python web development framework (documentation)
 python3-django - High-level Python web development framework
Changes:
 python-django (2:3.2.12-2ubuntu1) jammy; urgency=medium
 .
   * SECURITY UPDATE: Potential SQL injection in QuerySet.annotate(),
     aggregate(), and extra()
     - debian/patches/CVE-2022-28346.patch: prevent SQL injection in column
       aliases in django/db/models/sql/query.py, tests/aggregation/tests.py,
       tests/annotations/tests.py, tests/queries/tests.py,
       tests/expressions/test_queryset_values.py.
     - CVE-2022-28346
   * SECURITY UPDATE: Potential SQL injection via
     QuerySet.explain(**options) on PostgreSQL
     - debian/patches/CVE-2022-28347.patch: prevent SQL injection in
       django/db/backends/postgresql/features.py,
       django/db/backends/postgresql/operations.py,
       django/db/models/sql/query.py, tests/queries/test_explain.py.
     - CVE-2022-28347
Checksums-Sha1:
 b50c3e9c88ad878ad5eb26e4677b325c64182bc5 3274440 python-django-doc_3.2.12-2ubuntu1_all.deb
 822a7385eac5d032a80225184419607773e3fbca 14179 python-django_3.2.12-2ubuntu1_amd64.buildinfo
 4798e40884494fe02af699e8c350d2ee4557bbde 4007005 python-django_3.2.12-2ubuntu1_amd64_translations.tar.gz
 fba247bc9aaeffc0de640c30a07b2c2041dcdee6 3020588 python3-django_3.2.12-2ubuntu1_all.deb
Checksums-Sha256:
 5e2e18b3ae204e3961171b64edd72630cf986984465b076dc9a88a83830a7ba2 3274440 python-django-doc_3.2.12-2ubuntu1_all.deb
 030856c047d8580736eae5f1f259a2dba94df2f3eca95241a30751c9345e6742 14179 python-django_3.2.12-2ubuntu1_amd64.buildinfo
 73d32f930f3f38d545c36b8af8ae048289c525873f831d64b60a05156c68a734 4007005 python-django_3.2.12-2ubuntu1_amd64_translations.tar.gz
 57691c5f0da1edabfcc6c3c8c32f163e3fee66466e635b492964d21fdeda3136 3020588 python3-django_3.2.12-2ubuntu1_all.deb
Files:
 32ceab996b4095cdaa39bae34e5172dd 3274440 doc optional python-django-doc_3.2.12-2ubuntu1_all.deb
 1c26cfcc7db6a2f961124f84dbee47eb 14179 python optional python-django_3.2.12-2ubuntu1_amd64.buildinfo
 b331ea5f5d2cd7075264ed593314e68a 4007005 raw-translations - python-django_3.2.12-2ubuntu1_amd64_translations.tar.gz
 eccdadf26583120b724ae21f89a2481e 3020588 python optional python3-django_3.2.12-2ubuntu1_all.deb
Original-Maintainer: Debian Python Team <team+python@tracker.debian.org>