[Git][security-tracker-team/security-tracker][master] dla: add python-django

Sylvain Beucler beuc at debian.org
Mon Jul 1 15:01:45 BST 2019



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
af80d17f by Sylvain Beucler at 2019-07-01T14:01:28Z
dla: add python-django

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -82,7 +82,7 @@ libspring-java (Roberto C. Sánchez)
   NOTE: 20190624: Three CVEs remain to be patched. (roberto)
 --
 libxslt
-  NOTE: 20190701: the Security Team doesn't want us to mark when jessie was explicitely tested as unfixed, so writing it here..
+  NOTE: 20190701: the Security Team doesn't want us to mark when jessie was explicitely tested as unfixed, so writing it here (beuc)
   NOTE: 20190701: CVE-2019-13117: patch applies on jessie
   NOTE: 20190701: CVE-2019-13118: patch applies on jessie
 --
@@ -94,6 +94,10 @@ openjpeg2 (Markus Koschany)
 --
 pdns (Jonas Meurer)
 --
+python-django
+  NOTE: 20190701: CVE-2019-12781: upstream's 1.11 patch applies on jessie (beuc)
+  NOTE: 20190701: https://github.com/django/django/commit/32124fc41e75074141b05f10fc55a4f01ff7f050
+--
 qemu (Mike Gabriel)
   NOTE: 20190528: An upload candidate is waiting for being tested on real hardware.
   NOTE: 20190528: Still need to set up a notebook with jessie installed for testing.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/af80d17fbdc8f5e3d93b605185db7b604447da76

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/af80d17fbdc8f5e3d93b605185db7b604447da76
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190701/9fff1521/attachment.html>


More information about the debian-security-tracker-commits mailing list