Accepted python-django 1:1.10.7-2+deb9u10 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 01 Feb 2021 18:15:23 +0000
Source: python-django
Binary: python-django python3-django python-django-common python-django-doc
Architecture: source all
Version: 1:1.10.7-2+deb9u10
Distribution: stretch-security
Urgency: high
Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
python-django - High-level Python web development framework (Python 2 version)
python-django-common - High-level Python web development framework (common)
python-django-doc - High-level Python web development framework (documentation)
python3-django - High-level Python web development framework (Python 3 version)
Closes: 981562
Changes:
python-django (1:1.10.7-2+deb9u10) stretch-security; urgency=high
.
* CVE-2021-3281: Fix a potential directory-traversal via archive.extract().
.
The django.utils.archive.extract() function, used by startapp --template
and startproject --template, allowed directory-traversal via an archive
with absolute paths or relative paths with dot segments.
.
<https://www.djangoproject.com/weblog/2021/feb/01/security-releases/>
.
(Closes: #981562)
Checksums-Sha1:
a6e826169f348dfe3ca7e6d11e81abfde32098f6 2808 python-django_1.10.7-2+deb9u10.dsc
5edd13a642460c33cdaf8e8166eccf6b2a2555df 7737654 python-django_1.10.7.orig.tar.gz
79f6bbdd0e7f4170dc8f8096ae7b349390e34d4b 46952 python-django_1.10.7-2+deb9u10.debian.tar.xz
61e08787fcd04658dadfe040f3f9ba3c18ab9a76 1516590 python-django-common_1.10.7-2+deb9u10_all.deb
2cc294cea95155373975fea42c53f9aca4786da6 2537128 python-django-doc_1.10.7-2+deb9u10_all.deb
fae4f972ef0551bb9e05552be62d0422ef2ecf06 906592 python-django_1.10.7-2+deb9u10_all.deb
0b644f060b1a0705d92bc84e6f19509b34c4980b 9430 python-django_1.10.7-2+deb9u10_amd64.buildinfo
1bf2da532ee613c7f107fd41e332501e334f9e61 888132 python3-django_1.10.7-2+deb9u10_all.deb
Checksums-Sha256:
24022f4a7a7e693ba2d0e4ee54a2ec1c083d37aba854df001af1c2acb9c63f97 2808 python-django_1.10.7-2+deb9u10.dsc
593d779dbc2350a245c4f76d26bdcad58a39895e87304fe6d725bbdf84b5b0b8 7737654 python-django_1.10.7.orig.tar.gz
4340fae1bb08ed746b452766ed14141d26f7944b387d3454187220ac354fd11e 46952 python-django_1.10.7-2+deb9u10.debian.tar.xz
2207517dc9d70dcbbead0fca4d44f953f973a9f988ba6eea61579f3ab3c9685f 1516590 python-django-common_1.10.7-2+deb9u10_all.deb
dc7553b0de40d2cfaf857dc6fdac009506eaabb355f090c7d54fb0d1bf3a3d7d 2537128 python-django-doc_1.10.7-2+deb9u10_all.deb
67f5c1d9787f7c15c64b509ff213b3d553adb70597aa2e10391c1adbee81e00e 906592 python-django_1.10.7-2+deb9u10_all.deb
0d497ae54db9f2980a26caf18ba40d5228f4a8cd8b5763b0a6b534776a7c0268 9430 python-django_1.10.7-2+deb9u10_amd64.buildinfo
2f7c1d72f9600600b5a58a8466d6fe50ba546747e7c29b1252f1e3215889b9db 888132 python3-django_1.10.7-2+deb9u10_all.deb
Files:
cd63753adb9bd478770578132ca9dd0f 2808 python optional python-django_1.10.7-2+deb9u10.dsc
693dfeabad62c561cb205900d32c2a98 7737654 python optional python-django_1.10.7.orig.tar.gz
8dfcedd369efc415b5796f6507acb167 46952 python optional python-django_1.10.7-2+deb9u10.debian.tar.xz
0ee8485e316ffeb66525e4f9951bc44d 1516590 python optional python-django-common_1.10.7-2+deb9u10_all.deb
7b31dd6fe7eb3244c361fc79e0825f82 2537128 doc optional python-django-doc_1.10.7-2+deb9u10_all.deb
ab347ca938d7e02fc907a0598b8b1b8a 906592 python optional python-django_1.10.7-2+deb9u10_all.deb
dcb53931db391f4ac302ee3b728ace18 9430 python optional python-django_1.10.7-2+deb9u10_amd64.buildinfo
288d233a3aba5e18792b4fee6445955e 888132 python optional python3-django_1.10.7-2+deb9u10_all.deb
-----BEGIN PGP SIGNATURE-----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=TYTB
-----END PGP SIGNATURE-----
Reply to: