Accepted python-django 1:1.11.29-1+deb10u6 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 01 Feb 2023 10:34:19 -0800
Source: python-django
Binary: python-django python-django-common python-django-doc python3-django
Architecture: source all
Version: 1:1.11.29-1+deb10u6
Distribution: buster-security
Urgency: high
Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
python-django - High-level Python web development framework (Python 2 version)
python-django-common - High-level Python web development framework (common)
python-django-doc - High-level Python web development framework (documentation)
python3-django - High-level Python web development framework (Python 3 version)
Closes: 1030251
Changes:
python-django (1:1.11.29-1+deb10u6) buster-security; urgency=high
.
* CVE-2023-23969: Prevent a potential Denial of Service vulnerability with
pathological values for the Accept-Language header.
.
The parsed values of Accept-Language headers are cached in order to avoid
repetitive parsing. This could have led to a potential denial-of-service
vector via excessive memory usage if the raw value of Accept-Language
headers was very large.
.
Accept-Language headers are now limited to a maximum length in order to
avoid this issue. (Closes: #1030251)
Checksums-Sha1:
ccdbbe7e2202a940361dcc0af90709672f556544 3294 python-django_1.11.29-1+deb10u6.dsc
e71620c18c985d8f5381bd87c02dbd23f1f48dd0 7977916 python-django_1.11.29.orig.tar.gz
de4b63460a85cf9961484392d1de7c068ff126fd 44388 python-django_1.11.29-1+deb10u6.debian.tar.xz
e93746a46838feb4165a1d3ec8fc53d395219d62 1540372 python-django-common_1.11.29-1+deb10u6_all.deb
99efe36b534eb8eca72ad6410baa3e49fdcda521 2693444 python-django-doc_1.11.29-1+deb10u6_all.deb
acb653d0f04d92bb6012ec279d443a9b7ea0245b 921184 python-django_1.11.29-1+deb10u6_all.deb
8f002585810efb2b6780335119f385d5ba96efa3 14915 python-django_1.11.29-1+deb10u6_amd64.buildinfo
acbd0085272f7ed140382a61195b846b4bad615b 920916 python3-django_1.11.29-1+deb10u6_all.deb
Checksums-Sha256:
105fc8a425affad86fed484adb0f0aa0fe8dbdf8d4c09a7b661a5a398bf1714e 3294 python-django_1.11.29-1+deb10u6.dsc
4200aefb6678019a0acf0005cd14cfce3a5e6b9b90d06145fcdd2e474ad4329c 7977916 python-django_1.11.29.orig.tar.gz
f6b1ea344b0f7ef4b7ee0b051eceecbb03474c7a98e9913cfadb44a03990903c 44388 python-django_1.11.29-1+deb10u6.debian.tar.xz
b65815dfe8a213f46c6b6d5023747f7ee47a615e7b3432e89d89c4714df34e20 1540372 python-django-common_1.11.29-1+deb10u6_all.deb
b7d903e574eb5292cf4edd4275ee1c587c8f678947bb7e302b1e5c378da0a23b 2693444 python-django-doc_1.11.29-1+deb10u6_all.deb
b3b36edda3cd7cb4f7f2dfc6990184a23523fda93314ee7133ea48b5851a5b34 921184 python-django_1.11.29-1+deb10u6_all.deb
063ff0afdf46b3dc441a3b4f4ee8f400f8361810eb62c3f14e62685cd931ad4a 14915 python-django_1.11.29-1+deb10u6_amd64.buildinfo
2e5010958632499c6056dc87d778433526eda031402287ffdbe5bf965fe4eb66 920916 python3-django_1.11.29-1+deb10u6_all.deb
Files:
5cbc49028d939e0b7d9209971adf465a 3294 python optional python-django_1.11.29-1+deb10u6.dsc
e725953dfc63ea9e3b5b0898a8027bd7 7977916 python optional python-django_1.11.29.orig.tar.gz
3fc134a788ed81bf82a9f1c147d08b42 44388 python optional python-django_1.11.29-1+deb10u6.debian.tar.xz
23b4d96541348976a04db3fcb1d043b0 1540372 python optional python-django-common_1.11.29-1+deb10u6_all.deb
fb2cf2c9760193d750f7b85dfa728a93 2693444 doc optional python-django-doc_1.11.29-1+deb10u6_all.deb
0ad7bdc8401b6d402ec9653ad5bff2a4 921184 python optional python-django_1.11.29-1+deb10u6_all.deb
29de9a49a211d55ad0ecb90f17d359a5 14915 python optional python-django_1.11.29-1+deb10u6_amd64.buildinfo
08dbebc9ac1f1787ab582f636c844cc7 920916 python optional python3-django_1.11.29-1+deb10u6_all.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmPas5IACgkQHpU+J9Qx
HljR8Q/7BKvS0c05tI/EBEpsuGZNx4YBW9AEiTLygd4SlG5+sn82HMOrvk7DJfC7
vjgoagQ6KaYoLVkNIk1A0PkQ0U2YbToZ9FNOaUeTG6m/85S2jSSMqNBc2f2aGY9B
s/q2yFZmqFfQNFvn6o+/DcSuvmNPYuReSkxM7IYv17gljBARZkIzTgL/4FiHiXi2
0qbXaMRgmxcA9Xf94U74SoBKyg2KO9O7QGwMpCuUPJ9GdMal62+0ci4F7OyE9S1l
zTXT3nRTmNXcNIeFQ+3RTQAItKDH72G6J6Rst6ncHXIxPm+jTNln5m7O6iodfBK4
yFbPSOU94K1M/h5sik2BXx0fhXAlAwIf58LJvk8xatW4NlTaTHyMjWQL6KzWZbFv
El6/APW5ioMyo4nQ1yGlGvGbvmkE9Zbs4QIf/A1Fvfrt7TY5syGWGnbp6LMHg2nY
WvZdGStOazMYTOi6qyw5CK4lPkNbb0SVFwrvK8xpO3jJmMl63+NBrph9MaELWwdH
e0lRVp4BiGI+L4GGW325ix1CD0HZrXjbyOiBfxJWkdsQP4yEu5E7QCtaIv/eb35T
EKDSgw5xlV3l34wL3ZzhqNCEInjkD2WBsb6dzfGdqVi/m5m+Q4euaKsUbT/nMHBB
JCTxQeL7/rYNaBkuLbfcNJCpSIoDn6Va7l01ffw+h/zrdSw0ZJk=
=1GJO
-----END PGP SIGNATURE-----
Reply to: