[ubuntu-cloud-archive/mitaka-proposed] python-django (Accepted)
Corey Bryant
corey.bryant at canonical.com
Tue May 18 19:16:20 UTC 2021
python-django (1.8.7-1ubuntu5.15~cloud0) trusty-mitaka; urgency=medium
.
* New update for the Ubuntu Cloud Archive.
.
python-django (1.8.7-1ubuntu5.15) xenial-security; urgency=medium
.
* SECURITY UPDATE: Potential directory-traversal via uploaded files
- debian/patches/CVE-2021-28658.patch: properly sanitize filenames in
django/http/multipartparser.py, tests/file_uploads/tests.py,
tests/file_uploads/uploadhandler.py, tests/file_uploads/urls.py,
tests/file_uploads/views.py.
- CVE-2021-28658
Date: Fri, 09 Apr 2021 12:19:23 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>
More information about the Cloud-archive-changes
mailing list