[ubuntu-cloud-archive/ussuri-proposed] python-django (Accepted)
Corey Bryant
corey.bryant at canonical.com
Wed Feb 10 14:21:17 UTC 2021
python-django (2:2.2.12-1ubuntu0.3~cloud0) bionic-ussuri; urgency=medium
.
* New update for the Ubuntu Cloud Archive.
.
python-django (2:2.2.12-1ubuntu0.3) focal-security; urgency=medium
.
* SECURITY UPDATE: Potential directory-traversal via archive.extract()
- debian/patches/CVE-2021-3281.patch: check for invalid paths in
django/utils/archive.py.
- CVE-2021-3281
Date: Mon, 01 Feb 2021 12:37:42 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>
More information about the Cloud-archive-changes
mailing list