-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 11 Apr 2021 11:33:23 +0100 Source: python-django Binary: python-django-doc python3-django Built-For-Profiles: nocheck Architecture: source all Version: 2:2.2.20-1~bpo10+1 Distribution: buster-backports Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: python-django-doc - High-level Python web development framework (documentation) python3-django - High-level Python web development framework Closes: 986447 Changes: python-django (2:2.2.20-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. . python-django (2:2.2.20-1) unstable; urgency=medium . * New upstream security release: . - CVE-2021-28658: The MultiPartParser class allowed directory-traversal via uploaded files via maliciously crafted filenames. (Closes: #986447) Checksums-Sha1: 89d91b4adbbf185c58fb18530b587a00934a7518 2847 python-django_2.2.20-1~bpo10+1.dsc fcff4fda6d8db0d95ccc4d738f0c307930ed4770 9182853 python-django_2.2.20.orig.tar.gz 8c11a5e26b10862a6d5af27d92ce644c62888bb4 27280 python-django_2.2.20-1~bpo10+1.debian.tar.xz 5c9f377bf298f7dcb4e2364a9aeb8fb5ef8b4fba 3107768 python-django-doc_2.2.20-1~bpo10+1_all.deb 3551a91667be52ce78231d5923bd7468de18dc8a 7730 python-django_2.2.20-1~bpo10+1_amd64.buildinfo 51ee55422fc2b5c5c533c1313422cf066844f376 2681604 python3-django_2.2.20-1~bpo10+1_all.deb Checksums-Sha256: 49849578424e193d61dabd2b9ac72272a0701c31e71cdae5a635461d848a7faf 2847 python-django_2.2.20-1~bpo10+1.dsc 2569f9dc5f8e458a5e988b03d6b7a02bda59b006d6782f4ea0fd590ed7336a64 9182853 python-django_2.2.20.orig.tar.gz d5a668564702824e2c60aa9205719e10d4deb76291081231268c56b8bc7d47c2 27280 python-django_2.2.20-1~bpo10+1.debian.tar.xz f9858aef85042a03831356a705c6a856d488e02ec39a229e817def05c5acbe25 3107768 python-django-doc_2.2.20-1~bpo10+1_all.deb 9ba3796c21354b3ce7b4e731bf9a1f9fbed700b1beb0532b28007b6056a9f35f 7730 python-django_2.2.20-1~bpo10+1_amd64.buildinfo 9101915f45d8ba6a1bc2c7dee03f90d6cea4d06ba5b9743b05344be443b76ba9 2681604 python3-django_2.2.20-1~bpo10+1_all.deb Files: 4ee549ff117ce8cf395926b14594d900 2847 python optional python-django_2.2.20-1~bpo10+1.dsc 947060d96ccc0a05e8049d839e541b25 9182853 python optional python-django_2.2.20.orig.tar.gz 14b89c922dd1f15695ca420584961d3d 27280 python optional python-django_2.2.20-1~bpo10+1.debian.tar.xz 0b9093aea1137d3186f6544d4e4d3ea0 3107768 doc optional python-django-doc_2.2.20-1~bpo10+1_all.deb ad84dfe5fba4a77d94c6f7f73e82e86e 7730 python optional python-django_2.2.20-1~bpo10+1_amd64.buildinfo bf76882467424065abf28e3f6513c281 2681604 python optional python3-django_2.2.20-1~bpo10+1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmBy0cgACgkQHpU+J9Qx HliEVRAApXMoFnbp8PrMZhCqvBfBvzRlu4o70AP9eoca5nSqsRPiG0xP5OXR9Byj PDcLKTksXcZRY96rQgxL3O2Lm5w6t4AUIX+RqUTzYJ24g6pmpQsQZkL6RCkEW+k1 5oQ+PAJ0csflfS13JhtBM0RopFvmhXoVOJm7+eRfxO5WNlYxRktrkS559MMqKEXX t7SFKgB9TGs4XVoKYKd9INT7q9WQu1gCfwsybUWyaLQgz80AbUlQ/QHTF2T/O/fM oxtb4zZg/W9J+RUGBZpiSfz/ZysW2gIlcpVQhTBEe6Fr8kcncEXlpvXIP+2douaD U708f3olevla4vicVv+8kRHBiiI/4Rr9EAAQg5wc+IkCUkQ3jtlsk+UsR/Cp8wuu Twq2ayrrd1dL4uSE6wpsp45c1m721CjrZBcDAtaxp+yQ8sxOh29CbqSkQMPRHUZH abqrKLezUc+SySlBF3FYblWr5yL7hRKRFnZkd2okwrFFtb3zN/bwT2KR0t0EMafI TveFkNBHT2I43xKSKE0ZyylHQOpW9vzzx6PE7bEr4ETTjNq7OqVD+N8B+He9UR9r O8Auj6adrXU7JwJegggfnY+Pc2uyYFn8s+03/wLJASJYLI0t24bdmTft3lV5trWV 7BNiwpYtoDojugxM720VCg3r8vDkm5sS1mbskJAmH5sM1CsofcA= =c30h -----END PGP SIGNATURE-----