[Python-modules-team] Bug#748208: python-django: Upstream security fix not in Debian package ?

[Gael Le Mignot]

Package: python-django
Version: 1.4.5-1+deb7u4
Severity: important

Dear Maintainer,

There has been some security fixes by upstream Django, like
https://www.djangoproject.com/weblog/2014/apr/21/security/ 
which is a few week old, and yet I don't see any DSA nor 
patched version in the Debian archive.

Is the Debian version unaffeted ? Or else, could you make
a new release including the latest security fixes ?

Thanks for your work on packaging Django to Debian.

Regards,

-- System Information:
Debian Release: 7.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=fr_FR.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python-django depends on:
ii  python  2.7.3-4

Versions of packages python-django recommends:
ii  libjs-jquery  1.7.2+dfsg-1

Versions of packages python-django suggests:
pn  geoip-database-contrib  <none>
pn  gettext                 <none>
pn  python-flup             <none>
pn  python-mysqldb          <none>
pn  python-psycopg          <none>
ii  python-psycopg2         2.4.5-1
pn  python-sqlite           <none>
ii  python-yaml             3.10-4

-- no debconf information