Accepted python-django 1.4.5-1+deb7u7~bpo60+1 (source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 23 May 2014 21:52:54 +0100
Source: python-django
Binary: python-django python-django-doc
Architecture: source all
Version: 1.4.5-1+deb7u7~bpo60+1
Distribution: squeeze-backports
Urgency: high
Maintainer: Chris Lamb <lamby@debian.org>
Changed-By: Dominic Hargreaves <dom@earth.li>
Description:
python-django - High-level Python web development framework
python-django-doc - High-level Python web development framework (documentation)
Closes: 722483
Changes:
python-django (1.4.5-1+deb7u7~bpo60+1) squeeze-backports; urgency=high
.
* Rebuild for squeeze-backports.
.
python-django (1.4.5-1+deb7u7) stable-security; urgency=high
.
* New upstream security release.
https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/
- Caches may be allowed to store and serve private data (CVE-2014-1418)
- Malformed URLs from user input incorrectly validated (CVE-2014-3730)
* Add FTBFS-exception-in-servers-tests-tear-down.patch. Closes: #722483
Fixes unbalanced setUp/tearDown calls in LiveServerAddress test.
.
python-django (1.4.5-1+deb7u6) stable-security; urgency=high
.
* Fix regression of reverse() and partial views. (LP: #1311433)
Thanks Preston Timmons.
.
python-django (1.4.5-1+deb7u5) stable-security; urgency=high
.
* New upstream security release.
- Unexpected code execution using ``reverse()``
- CVE-2014-0472
- Caching of anonymous pages could reveal CSRF token
- CVE-2014-0473
- MySQL typecasting could result in unexpected matches
- CVE-2014-0474
Checksums-Sha1:
b2a4154758f97e62071d5c397e58ea3b808f0d93 2235 python-django_1.4.5-1+deb7u7~bpo60+1.dsc
1bfaa4643c6775fbf394137f1533659be45441e7 7735582 python-django_1.4.5.orig.tar.gz
2d129ba0171e0e46d1e94e678c7b95a7078f4b4e 39052 python-django_1.4.5-1+deb7u7~bpo60+1.debian.tar.gz
c0cbd01450a1c47665660e119504b4bb386a5d86 5276994 python-django_1.4.5-1+deb7u7~bpo60+1_all.deb
8fcc28ad97b44e71fcf8c6b4d74a348875fae353 2433536 python-django-doc_1.4.5-1+deb7u7~bpo60+1_all.deb
Checksums-Sha256:
7c61cd4e45854ffaf8316c0fb06d643897f396352fbf45c5d5834fda6fbe35e7 2235 python-django_1.4.5-1+deb7u7~bpo60+1.dsc
0e1e8c4217299672bbf9404994717fca2d8d4b7a4f7b8b3b74d413e1fda81428 7735582 python-django_1.4.5.orig.tar.gz
97b1f201052d9adbef14d51314cf5b50ac6d3552c1b0b44f32e077892b1eb55a 39052 python-django_1.4.5-1+deb7u7~bpo60+1.debian.tar.gz
e109b973c8314a650d986946620270f539891b8d76043a1f00658a5965aad5b0 5276994 python-django_1.4.5-1+deb7u7~bpo60+1_all.deb
71f9f71d10c10cc2cdeb3fe83a37c8f7a5e16a7e7ffc0a722d428ef76fd641f1 2433536 python-django-doc_1.4.5-1+deb7u7~bpo60+1_all.deb
Files:
8a7dc9c13aacae89c4dea9c7223a96c8 2235 python optional python-django_1.4.5-1+deb7u7~bpo60+1.dsc
851d00905eb70e4aa6384b3b8b111fb7 7735582 python optional python-django_1.4.5.orig.tar.gz
36e146651cefcc28d427f9fe2ca72e27 39052 python optional python-django_1.4.5-1+deb7u7~bpo60+1.debian.tar.gz
1d30b1845422545a0486f25e8296049d 5276994 python optional python-django_1.4.5-1+deb7u7~bpo60+1_all.deb
20e858e65b214fce6fb43f1d22ae43ac 2433536 doc optional python-django-doc_1.4.5-1+deb7u7~bpo60+1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iQIcBAEBAgAGBQJTf8+nAAoJEMAFfnFNaU+yvfkP/0zO8eqmtg7PbTeR7dsmtYkV
xpYXpPDlARrjbODxaiOhhgnN9vj5vry1zqscmbk9pc/9NyF0z6DkHDhYbjFxhJag
r9vHLoIe1/lqAzXJP09bY29usVm2vc6ceN5Iu9tnFjiEFLKMypRM2Ji1KaSl+1V2
vYhConJLV0N1EG4iWQqQIV7tx6KK+itcBb865z5HYoVGsxNhevdNI8pn0mbYhdkY
HIEPc3mAarPV1JJdVWZOnE84/WSvgEUR7zo1E9WWcw/g4iJYNtpQz8BiiE4a0hZn
qIb6zi3xwq51O52pQ1wy0/6ha350w7qT7SqpcpRNgQ+7GEi/eWoGl3zbeDD6O83U
RJrERVJTr5jl8GJi3qAGC1c2GnNlFQk+mmMIxBrqxIcklh7wXB+IFyBdUgbSr5fd
JvX/DJX3CdZ02P4/SEHb2n5kxOZujWWR4mPBRvt/hWWijB5Q5bHMufmIBhlOd0a7
rFUJ+c4t0YhLkp1/yuWvv80zZnTsrBUvehiSlknsaMUHambTlWez1hKF0SmeeY8y
oQygRtn8PJoCXRXBPH34cVSCxWBRshB7cBJXN4YISCIVtmpaZCTSh2lRh7XlHfX/
0O9Qlfmh8J1mU1PYaATou1+iVuu/23C6XrGi48Lzfrqn0IMaYbrz/ngZi4CCpSVD
KJcs59rXGyY8gR+ihNe+
=ZvxO
-----END PGP SIGNATURE-----
Reply to: