[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: DSA-4160-1 python-django

[Luciano Bello]

Luciano Bello pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6793b723 by Luciano Bello at 2018-04-01T08:48:24-04:00
DSA-4160-1 python-django

- - - - -
57e712be by Luciano Bello at 2018-04-01T09:10:40-04:00
merge

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -4083,10 +4083,12 @@ CVE-2018-7537 (An issue was discovered in Django 2.0 before 2.0.3, 1.11 before .
 	{DLA-1303-1}
 	- python-django 1:1.11.11-1
 	NOTE: https://www.djangoproject.com/weblog/2018/mar/06/security-releases/
+	NOTE: Patch https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539
 CVE-2018-7536 (An issue was discovered in Django 2.0 before 2.0.3, 1.11 before ...)
 	{DLA-1303-1}
 	- python-django 1:1.11.11-1
 	NOTE: https://www.djangoproject.com/weblog/2018/mar/06/security-releases/
+	NOTE: Patch https://github.com/django/django/commit/abf89d729f210c692a50e0ad3f75fb6bec6fae16
 CVE-2018-7535
 	RESERVED
 CVE-2018-7534


=====================================
data/DSA/list
=====================================
--- a/data/DSA/list
+++ b/data/DSA/list
@@ -1,3 +1,7 @@
+[01 Apr 2018] DSA-4161-1 python-django - security update
+	{CVE-2018-7536 CVE-2018-7537}
+	[jessie] - python-django 1.7.11-1+deb8u3
+	[stretch] - python-django 1:1.10.7-2+deb9u1
 [01 Apr 2018] DSA-4160-1 libevt - security update
 	{CVE-2018-8754}
 	[stretch] - libevt 20170120-1+deb9u1


=====================================
data/dsa-needed.txt
=====================================
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -68,10 +68,6 @@ phpmyadmin/oldstable (abhijith)
 --
 pjproject
 --
-python-django (luciano)
-  Brian May proposed a debdiff for jessie-security, needs review and ack.
-  stretch-security update needed as well to be done.
---
 qemu/oldstable
 --
 redmine



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/0ffe8e5f7844732121150cade15131c2310e4dca...57e712bebb7d7f8f55758f0c394e2d665a1593d1

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/0ffe8e5f7844732121150cade15131c2310e4dca...57e712bebb7d7f8f55758f0c394e2d665a1593d1
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180401/72340027/attachment.html>