~ubuntu-branches/ubuntu/oneiric/python-django/oneiric-updates

Viewing all changes in revision 36.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers, Scott Kitterman, Steve Beattie, Marc Deslauriers
  • Date: 2012-09-06 08:40:28 UTC
  • Revision ID: package-import@ubuntu.com-20120906084028-g2utu3z0x3uzwhvm
Tags: 1.3-2ubuntu1.3
[ Scott Kitterman ]
* SECURITY UPDATE: multiple issues (LP: #1031733)
* References CVE-2012-3442 CVE-2012-3443 CVE-2012-3444
  https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
* New upstream release to address three security issues:
  - Cross-site scripting in authentication views
  - Denial-of-service in image validation
  - Denial-of-service via get_image_dimensions()
* Added debian/patches/security_http_redirects,
  security_image_uploading_two, and security_image_uploading cherry picked
  from upstream git

[ Steve Beattie ]
* added debian/patches/10_fix_testsuite_failure.patch: adjust
  test_week_view_allow_future to ensure the first week of the year is
  selected

[ Marc Deslauriers ]
* debian/patches/security_http_redirects: remove unrelated changes, add
  python 2.4 regression fix.

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: