lp://staging/ubuntu/feisty-security/python-django

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

7. By Andrea Gasparini on 2008-06-03

* SECURITY UPDATE: security vulnerability in django admin
* debian/patches/05_CVE-2008-2302_fix.diff: added upstream fix
  escaping request path in login page of admin site.(LP: #234631)
* References:
  CVE link: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2302
  upstream announce: http://www.djangoproject.com/weblog/2008/may/14/security/
  upstream fix: http://code.djangoproject.com/changeset/7527

6. By William Grant on 2007-11-09

* SECURITY UPDATE: Denial of service in i18n middleware.
* debian/patches/03_CVE-2007-5712.diff: Add upstream fix. (LP: #157903)
* References:
  CVE-2007-5712

5. By Lionel Porcheron on 2007-03-11

* adding bash completion (Closes LP: #87107)
* debian/control: Change Maintainer/XSBC-Original-Maintainer field

4. By Raphaël Hertzog on 2007-01-21

[ Brett Parker ]
* New upstream minor release for security bugs:
  - http://www.djangoproject.com/weblog/2007/jan/21/0951/
    - Fixes a small security vulnerability in the script Django's
      internationalization system uses to compile translation files
      (changeset 4360 in the "0.95-bugfixes" branch).
    - fix for a bug in Django's authentication middleware which could cause
      apparent "caching" of a logged-in user (changeset 4361).
    - patch which disables debugging mode in the flup FastCGI package Django
      uses to launch its FastCGI server, which prevents tracebacks from
      bubbling up during production use (changeset 4363).
  Closes: #407786, #407607
* Sets Recommends to python-psycopg and moves other database engines to
  the Suggests field.

[ Raphael Hertzog ]
* Use python-pysqlite2 as default database engine in Recommends. Others are
  in Suggests. Closes: #403761
* Add python-psycopg2 in Suggests. Closes: #407489

3. By Raphaël Hertzog on 2006-12-16

[ Piotr Ozarowski ]
* Added XS-Vcs-Svn field

[ Brett Parker ]
* Made manage.py get a shebang with the version of python
  used when running django-admin (closes: #401616)
* Created a convenience /usr/lib/python-django/bin symlink.

[ Raphael Hertzog ]
* Adapted Brett's work to better fit my views of the packaging.

2. By Raphaël Hertzog on 2006-10-09

[ Brett Parker ]
* 0.95 release - initial packaging

[ Raphael Hertzog ]
* Fix recommends: s/python-sqlite/python-pysqlite2/
* Add debian/pyversions to ensure that we have at least python 2.3 (and to
  work around bug #391689 of python-support).

1. By Raphaël Hertzog on 2006-10-09

Import upstream version 0.95