Ubuntu
python-django package

  1. Jaunty (9.04)
  2. Bug #408825
  3. Comment #10

Comment 10 for bug 408825

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package python-django - 1.0.2-1ubuntu0.1

---------------
python-django (1.0.2-1ubuntu0.1) jaunty-security; urgency=low

  * SECURITY UPDATE: crafted URL can cause the development server to serve
    any file to which it has read access
    http://www.djangoproject.com/weblog/2009/jul/28/security/
    - Apply upstream security patch changeset 11353
    - LP: #408825
    - CVE-2009-2659

 -- Alistair Marshall <email address hidden> Fri, 07 Aug 2009 14:06:30 +0100