[Python-modules-team] Bug#929927: python-django: CVE-2019-12308: AdminURLFieldWidget XSS

[Chris Lamb]

[Adding lfaraone at debian.org to CC]

Salvatore Bonaccorso wrote

> CVE-2019-12308[0]:
> AdminURLFieldWidget XSS
> 
> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> 
> For further information see:
> 
> [0] https://security-tracker.debian.org/tracker/CVE-2019-12308
>     https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12308
> [1] https://www.djangoproject.com/weblog/2019/jun/03/security-releases/

Luke, do you still plan to take this as discussed during the embargo? I
might have some bandwidth the next day or so if not, but let me know.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org 🍥 chris-lamb.co.uk
       `-