Ubuntu
python-django package

python-django 1:1.11.20-1ubuntu0.1 source package in Ubuntu

Changelog

python-django (1:1.11.20-1ubuntu0.1) disco-security; urgency=medium

  * SECURITY UPDATE: Incorrect HTTP detection with reverse-proxy
    connecting via HTTPS
    - debian/patches/CVE-2019-12781.patch: made HttpRequest always
      trusty SECURE_PROXY_SSL_HEADER if set in django/http/request.py,
      docs/ref/settings.txt and added tests to tests/settings_test/tests.py.
    - CVE-2019-12781
  * SECURITY UPDATE: XSS in Django admin via AdminURLFieldWidget
    - debian/patches/CVE-2019-12308.patch: made AdminURLFieldWidget
      validate URL before rendering clickable link in
      django/contrib/admin/templates/admin/widgets/url.html,
      django/contrib/admin/widgets.py add test test/admin_widgets/tests.py.
    - CVE-2019-12308

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 24 Jun 2019 13:49:07 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Disco: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-django_1.11.20.orig.tar.gz 7.5 MiB 43a99da08fee329480d27860d68279945b7d8bf7b537388ee2c8938c709b2041
python-django_1.11.20-1ubuntu0.1.debian.tar.xz 28.6 KiB 75eb0edafa796c5c981f76438d496ad3897c23e916a02a86a67f0469675f40d7
python-django_1.11.20-1ubuntu0.1.dsc 3.3 KiB 4cf431c98e1fcdd86794dfe34dab2326175b4f3c892a20c5cd1377f72e6b7784

View changes file

Binary packages built by this source

python-django: No summary available for python-django in ubuntu disco.

No description available for python-django in ubuntu disco.

python-django-common: No summary available for python-django-common in ubuntu disco.

No description available for python-django-common in ubuntu disco.

python-django-doc: No summary available for python-django-doc in ubuntu disco.

No description available for python-django-doc in ubuntu disco.

python3-django: No summary available for python3-django in ubuntu disco.

No description available for python3-django in ubuntu disco.