Sync python-django 1.6.5-1 (main) from Debian sid (main)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
python-django (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned |
Bug Description
Please sync python-django 1.6.5-1 (main) from Debian sid (main)
Explanation of the Ubuntu delta and why it can be dropped:
All Ubuntu patches are backports from upstream. This release contains
them all.
Changelog entries since current utopic version 1.6.1-2ubuntu0.3:
python-django (1.6.5-1) unstable; urgency=high
* New upstream security release.
- Caches may be allowed to store and serve private data (CVE-2014-1418)
- Malformed URLs from user input incorrectly validated
* Drop partial_
-- Raphaël Hertzog <email address hidden> Wed, 14 May 2014 22:49:59 +0200
python-django (1.6.3-2) unstable; urgency=high
* Fix regression of reverse() and partial views. (LP: #1311433)
Thanks Preston Timmons.
-- Luke Faraone <email address hidden> Tue, 22 Apr 2014 20:44:18 -0700
python-django (1.6.3-1) unstable; urgency=high
* New upstream security release.
- Unexpected code execution using ``reverse()``
- CVE-2014-0472
- Caching of anonymous pages could reveal CSRF token
- CVE-2014-0473
- MySQL typecasting could result in unexpected matches
- CVE-2014-0474
* Drop patches 07_translation_
upstream
-- Luke Faraone <email address hidden> Mon, 21 Apr 2014 16:47:14 -0700
Changed in python-django (Ubuntu): | |
importance: | Undecided → Wishlist |
This bug was fixed in the package python-django - 1.6.5-1
Sponsored for Andrew Starr-Bochicchio (andrewsomething)
---------------
python-django (1.6.5-1) unstable; urgency=high
* New upstream security release. functions_ reverse. patch (merged upstream).
- Caches may be allowed to store and serve private data (CVE-2014-1418)
- Malformed URLs from user input incorrectly validated
* Drop partial_
-- Raphaël Hertzog <email address hidden> Wed, 14 May 2014 22:49:59 +0200
python-django (1.6.3-2) unstable; urgency=high
* Fix regression of reverse() and partial views. (LP: #1311433)
Thanks Preston Timmons.
-- Luke Faraone <email address hidden> Tue, 22 Apr 2014 20:44:18 -0700
python-django (1.6.3-1) unstable; urgency=high
* New upstream security release. encoding_ fix and ticket21869.diff; merged
- Unexpected code execution using ``reverse()``
- CVE-2014-0472
- Caching of anonymous pages could reveal CSRF token
- CVE-2014-0473
- MySQL typecasting could result in unexpected matches
- CVE-2014-0474
* Drop patches 07_translation_
upstream
-- Luke Faraone <email address hidden> Mon, 21 Apr 2014 16:47:14 -0700