Ubuntu
python-django package

  1. Bug #1553251
  2. Comment #4

Comment 4 for bug 1553251

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package python-django - 1.7.9-1ubuntu5.3

---------------
python-django (1.7.9-1ubuntu5.3) wily-security; urgency=medium

  * SECURITY REGRESSION: is_safe_url() with non-unicode url (LP: #1553251)
    - debian/patches/CVE-2016-2512-regression.patch: force url to unicode
      in django/utils/http.py, added test to
      tests/utils_tests/test_http.py.
    - CVE-2016-2512

 -- Marc Deslauriers <email address hidden> Fri, 04 Mar 2016 11:06:58 -0500