group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1553251@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package python-django - 1.6.1-2ubuntu0.13

---------------
python-django (1.6.1-2ubuntu0.13) trusty-security; urgency=medium

  * SECURITY REGRESSION: is_safe_url() with non-unicode url (LP: #1553251)
    - debian/patches/CVE-2016-2512-regression.patch: force url to unicode
      in django/utils/http.py, added test to
      tests/utils_tests/test_http.py.
    - CVE-2016-2512

 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>  Fri, 04 Mar 2016
11:07:40 -0500

** Changed in: python-django (Ubuntu Trusty)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1553251

Title:
  USN-2915-1 introduced a regression in is_safe_url()

Status in Django:
  Unknown
Status in python-django package in Ubuntu:
  Fix Released
Status in python-django source package in Precise:
  Confirmed
Status in python-django source package in Trusty:
  Fix Released
Status in python-django source package in Wily:
  Confirmed
Status in python-django source package in Xenial:
  Fix Released

Bug description:
  See
  https://github.com/claudep/django/commit/7ee019b60ab696930c8b692bff7d29c0f4cea885

To manage notifications about this bug go to:
https://bugs.launchpad.net/django/+bug/1553251/+subscriptions