Accepted python-django 1:1.10.7-2+deb9u11 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 19 Feb 2021 12:21:16 +0000
Source: python-django
Binary: python-django python3-django python-django-common python-django-doc
Architecture: source all
Version: 1:1.10.7-2+deb9u11
Distribution: stretch-security
Urgency: high
Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
python-django - High-level Python web development framework (Python 2 version)
python-django-common - High-level Python web development framework (common)
python-django-doc - High-level Python web development framework (documentation)
python3-django - High-level Python web development framework (Python 3 version)
Closes: 983090
Changes:
python-django (1:1.10.7-2+deb9u11) stretch-security; urgency=high
.
* Apply security fix from upstream:
.
- CVE-2021-23336: Prevent a web cache poisoning attack via "parameter
cloaking". Django contains a copy of urllib.parse.parse_qsl() which was
added to backport some security fixes. A further security fix has been
issued recently such that parse_qsl() no longer allows using ";" as a
query parameter separator by default. (Closes: #983090)
.
<https://www.djangoproject.com/weblog/2021/feb/19/security-releases/>
Checksums-Sha1:
f765157e53f6720aeb24979666b77affdde12abd 2808 python-django_1.10.7-2+deb9u11.dsc
773c7732b6acef90aa3ab4f9e649034d0a8af355 48260 python-django_1.10.7-2+deb9u11.debian.tar.xz
e2de46b418c056b9f97c120a4017fdc409769461 1515734 python-django-common_1.10.7-2+deb9u11_all.deb
7071ad922d73f050e5c7f132d651dba973bb372f 2537482 python-django-doc_1.10.7-2+deb9u11_all.deb
a3f45fd86c780de5104e9529886bc828e2e5b102 905938 python-django_1.10.7-2+deb9u11_all.deb
ba40759ea3aee957a264d648a1bddc31fe25523d 9437 python-django_1.10.7-2+deb9u11_amd64.buildinfo
a753ec88612200713829f8064ca26b71ac68e590 887630 python3-django_1.10.7-2+deb9u11_all.deb
Checksums-Sha256:
530c09b27b8f67099577e2b8d330779f48864a9a7cd94fac74e740f49c0bdd55 2808 python-django_1.10.7-2+deb9u11.dsc
d7d7bda5f0ace4bedaa9357b40b59c61318a1c2d2cadfd60596190b918529fe8 48260 python-django_1.10.7-2+deb9u11.debian.tar.xz
24e073aa34515849301730084fa91e25416648ae2b459f0a3da54094195e34a5 1515734 python-django-common_1.10.7-2+deb9u11_all.deb
2355eb8e0f5b6f97341d818a9ca4f17aa2dfe1b332620952c74a822ba006a999 2537482 python-django-doc_1.10.7-2+deb9u11_all.deb
4da78b72427ce5568073e7ad19477478b5651fdeccfc5ae1631780194d9063cd 905938 python-django_1.10.7-2+deb9u11_all.deb
004f2a01f3ca657209a7f7ad486e5258c1cb7f4e139752ecfc1243c86ac20ef4 9437 python-django_1.10.7-2+deb9u11_amd64.buildinfo
4d327a1af55d74595d8a04947821c77639c361d7bf87524c95ffd2e45de5f7c3 887630 python3-django_1.10.7-2+deb9u11_all.deb
Files:
6d473a83932dcd5e166a9ac51a483bce 2808 python optional python-django_1.10.7-2+deb9u11.dsc
e311f2f376c66e800d037311e9fb048b 48260 python optional python-django_1.10.7-2+deb9u11.debian.tar.xz
1a445a1a23ccbf07c70f8efc67568c77 1515734 python optional python-django-common_1.10.7-2+deb9u11_all.deb
431c926e8be24450832d031f17ede851 2537482 doc optional python-django-doc_1.10.7-2+deb9u11_all.deb
823d98e5624f9d68de6dce4e72921fd1 905938 python optional python-django_1.10.7-2+deb9u11_all.deb
e502d1b12587a03c24589fb233f55e2b 9437 python optional python-django_1.10.7-2+deb9u11_amd64.buildinfo
bf8ff3f9d604bd56ee3255eec5cb5302 887630 python optional python3-django_1.10.7-2+deb9u11_all.deb
-----BEGIN PGP SIGNATURE-----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=eVQJ
-----END PGP SIGNATURE-----
Reply to: