[Python-modules-team] Bug#934026: python-django: CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235

[Chris Lamb]

Hi Moritz et al.,


> > > > > > Security team (added to CC), would you be interested in uploads for
> > > > > > buster (currently 1:1.11.22-1~deb10u1) and stretch (currently
> > > > > > 1:1.10.7-2+deb9u5)?
> > […]
> > > I just realised that there's a 1.11.23 (thanks Salvatore!), given that
> > > we agreed to follow 1.11.x in buster, shouldn't we rather use that one?
> > 
> > D'oh, that makes more sense. Okay, I can prepare a debdiff for that --
> > however, can you just confirm the version we should use?
> > 1:1.11.23-1~deb10u1?
> 
> Looks good!

Updated debdiff attached.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org 🍥 chris-lamb.co.uk
       `-
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 10.debdiff.txt
URL: <http://alioth-lists.debian.net/pipermail/python-modules-team/attachments/20190808/8d6c7f1b/attachment-0001.txt>