UbuntuUpdates.org

Package "python-django"

Name: python-django

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • High-level Python web development framework (documentation)
  • High-level Python web development framework
Latest version: 3:3.2.15-1ubuntu1.2
Release: kinetic (22.10)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "python-django" in Kinetic

Repository Area Version
base main 3:3.2.15-1ubuntu1
updates main 3:3.2.15-1ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3:3.2.15-1ubuntu1.2 2023-02-14 15:07:10 UTC

  python-django (3:3.2.15-1ubuntu1.2) kinetic-security; urgency=medium

  * SECURITY UPDATE: Potential denial-of-service in file uploads
    - debian/patches/CVE-2023-24580.patch: add limits to
      django/conf/global_settings.py, django/core/exceptions.py,
      django/core/handlers/exception.py, django/http/multipartparser.py,
      django/http/request.py, docs/ref/exceptions.txt,
      docs/ref/settings.txt, tests/handlers/test_exception.py,
      tests/requests/test_data_upload_settings.py.
    - CVE-2023-24580

 -- Marc Deslauriers <email address hidden> Wed, 08 Feb 2023 08:53:34 -0500
Source diff to previous version

Version: 3:3.2.15-1ubuntu1.1 2023-02-01 15:07:22 UTC

  python-django (3:3.2.15-1ubuntu1.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: Potential DoS via Accept-Language headers
    - debian/patches/CVE-2023-23969.patch: limit length of Accept-Language
      headers in django/utils/translation/trans_real.py,
      tests/i18n/tests.py.
    - CVE-2023-23969

 -- Marc Deslauriers <email address hidden> Mon, 30 Jan 2023 08:35:46 -0500


About   -   Send Feedback to @ubuntu_updates