Accepted python-django 2:2.2.20-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 06 Apr 2021 11:44:51 +0100
Source: python-django
Built-For-Profiles: nocheck
Architecture: source
Version: 2:2.2.20-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 986447
Changes:
python-django (2:2.2.20-1) unstable; urgency=medium
.
* New upstream security release:
.
- CVE-2021-28658: The MultiPartParser class allowed directory-traversal
via uploaded files via maliciously crafted filenames. (Closes: #986447)
Checksums-Sha1:
0469befab0a844899c20387cfcdd3cc6bc64d6dc 2779 python-django_2.2.20-1.dsc
fcff4fda6d8db0d95ccc4d738f0c307930ed4770 9182853 python-django_2.2.20.orig.tar.gz
9743574f2cc908a3e11b4efb9001a3a5c3132832 26764 python-django_2.2.20-1.debian.tar.xz
93c2243bdf1a16b224fd6dce13c5f9e795df1841 7734 python-django_2.2.20-1_amd64.buildinfo
Checksums-Sha256:
f9b90330334cd284591347581fbeb84c27ba2a2058d62618d649937b4cffdf44 2779 python-django_2.2.20-1.dsc
2569f9dc5f8e458a5e988b03d6b7a02bda59b006d6782f4ea0fd590ed7336a64 9182853 python-django_2.2.20.orig.tar.gz
2e9fa9c26055a26c14068da560ddf1bf6d6dbd594caac9d596139a5914d42eeb 26764 python-django_2.2.20-1.debian.tar.xz
4c7ad54c65acf259d8d18f5f52bb298a2a3ba4008b0b34665648b1833e1b24b0 7734 python-django_2.2.20-1_amd64.buildinfo
Files:
157521cdbabd57d8879edc0abf913da5 2779 python optional python-django_2.2.20-1.dsc
947060d96ccc0a05e8049d839e541b25 9182853 python optional python-django_2.2.20.orig.tar.gz
10f271eea8296b83bc4df25ac4e96019 26764 python optional python-django_2.2.20-1.debian.tar.xz
5010e0cf73c841aa85ff14d6809a6e91 7734 python optional python-django_2.2.20-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmBsPJ0ACgkQHpU+J9Qx
HlhtjA/+Kw9h+j4+0O16EnyyAPf1mPQBjFibdT6hcvYcNno9HeVSUOL56gZm+Jwu
q4Xnq5T4TE1LmS16nRg0QP2y5GDgDj7ZI1CimCNiqupL97+WTd0OAuah7RwuHE2L
rbjQS+Op7Af46emGxV7MHyChk9HOl1zI+JXkDxe8BsoyswUgaIn1Q3/V/++AvwAb
7D2oZxdDssT4aFCsIGzEU24mH+H9KqF/qkl5eikcUhY+1QuUjI0kbq8FP+eej0bK
NfFGRx3hDYnLYPrH3huaNW/wZve+uwm4xFPRA73EwSnrMS7zr4D3hckJRBy8/AN8
lTBBMHYnEGfP7qn8jjWZ5ASLGW6Un6T/tMCgEvMgvZkF3GeECZ+bCvMATf2TnS5A
Tvq0/0+Zb5GhzfsZNch3+xBl/VR3YdP59TDBUUQHioP3TKZH6Md5bbxn1FS9RM0r
V5byZCtx5SrIk5Zp8k9mSBH5IXiQIEkOmLQ/kC02wxO0eUy3Kg44ATz7FOCQpatZ
xLuYQyrhDj+Ca6AW8gaqhRYADpbHQAapGd4cl8+7nB66a+RCKlA6lPUWo7wQZpem
Ue8hzTt6nd45rIko/Gw6y4Sp3e0ncrmgbkFvK+AVPwObFpqW7xBIft4A4hRZNAON
ge+Z8RRi/MzCbC8aNmDab3cTcpB4DqcsYo0H8XhKUx588xuJdvo=
=DRhP
-----END PGP SIGNATURE-----
Reply to: