Ubuntu
python-django package

python-django 1.1.1-2ubuntu1.2 source package in Ubuntu

Changelog

python-django (1.1.1-2ubuntu1.2) lucid-security; urgency=low

  * SECURITY UPDATE: information leak in admin interface
    - debian/patches/08_security_admin_infoleak.diff: validate querystring
      lookup arguments either specify only fields on the model being viewed,
      or cross relations which have been explicitly whitelisted.
    - CVE-2010-4534
  * SECURITY UPDATE:
    - debian/patches/09_security_pasword_reset_dos.diff: adjust
      base36_to_int() function in django.utils.http will now validate the
      length of its input; on input longer than 13 digits (sufficient to
      base36-encode any 64-bit integer), it will now raise ValueError.
      Additionally, the default URL patterns for django.contrib.auth will now
      enforce a maximum length on the relevant parameters.
    - CVE-2010-4535
 -- Jamie Strandboge <email address hidden>   Mon, 03 Jan 2011 11:31:57 -0600

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Lucid
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Lucid: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
python-django_1.1.1.orig.tar.gz 5.4 MiB d65b18319496fc4923b37fdb736e5ba1a90a3a18e2d7eaac7f3ad30738d1f6e4
python-django_1.1.1-2ubuntu1.2.diff.gz 42.8 KiB 9a6f1ca1262165dce6217a3326e9fe45d606d771d20bd97e75cfe8f6e0a17119
python-django_1.1.1-2ubuntu1.2.dsc 2.2 KiB 38c774e1e388d8fc003589e9f4072cc1f5655a25ee6138068f0ee88d715accd8

View changes file

Binary packages built by this source

python-django: No summary available for python-django in ubuntu lucid.

No description available for python-django in ubuntu lucid.

python-django-doc: No summary available for python-django-doc in ubuntu lucid.

No description available for python-django-doc in ubuntu lucid.