-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 06 May 2021 13:04:03 +0100 Source: python-django Architecture: source Version: 2:3.2.2-1 Distribution: experimental Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 988136 Changes: python-django (2:3.2.2-1) experimental; urgency=medium . * New upstream security release: - CVE-2021-32052: Header injection possibility since URLValidator accepted newlines in input on Python 3.9.5+. (Closes: #988136) - Full release notes: <https://www.djangoproject.com/weblog/2021/may/06/security-releases/> Checksums-Sha1: dcc9f40173a38c5489cd21135be30d1334042a86 2779 python-django_3.2.2-1.dsc 67932014e89b3388eb6df61619ce65ebe49cd620 9796920 python-django_3.2.2.orig.tar.gz 43e2116ef147e1004c7cbd6791487638ef009bff 26564 python-django_3.2.2-1.debian.tar.xz 3ba9531b1370520920abaab087621392fc0acf71 12983 python-django_3.2.2-1_amd64.buildinfo Checksums-Sha256: d0bfc2da53731fb857b370419bda7e8fdff74364654c5199cdf7a546c7354207 2779 python-django_3.2.2-1.dsc 0a1d195ad65c52bf275b8277b3d49680bd1137a5f55039a806f25f6b9752ce3d 9796920 python-django_3.2.2.orig.tar.gz 60b1b8207f804aa8a8d4d080809e0eced20449af247903a999b7431b560bb41c 26564 python-django_3.2.2-1.debian.tar.xz 7b3e20d42577624a3f084fe2a2b1377f01accc5a3d5534bff8e1634c17824d7f 12983 python-django_3.2.2-1_amd64.buildinfo Files: 19cace1a83a6e5ee585e83da80a70664 2779 python optional python-django_3.2.2-1.dsc 43784c090a8805605e3d0b768cd21cb2 9796920 python optional python-django_3.2.2.orig.tar.gz 0b777794d6a3dd26d26ab65223742230 26564 python optional python-django_3.2.2-1.debian.tar.xz 072af64e2cec83453fa7c8ad2d3dfb98 12983 python optional python-django_3.2.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmCUAgoACgkQHpU+J9Qx HljxbhAAuUI2gDXyT/VVGekE5cKt2y43Xrz33+QNsXi7QZlcz5NaqzL3T+c/1+JI +nFTQ/BG9L9uNjmMngx9WoNJxAFLl8NJuZQY3OxY9WHSa5htTiDSlKXX9dPOFrME RoFAe5CMJuqwiNrowj4yeuWcUJ1VqZMf0QUO20b95bzJV1h6w//UarnjxLPXVQi3 w/7DYDOFKHbPgu8PmGjP6gLzVXTPQbQD6+xo6N4ravljsD0XRARo4HKlFph8MSUZ 4s2ONGUx2BKVFDMv0ufketyBVmGVT1XWfsbA5lGW/WaB7He95r7zjtWfsfahQNLK +s9TEFvBGVKtday6V1OiqZYq6uHXAbTXmou74R8PbolJg2VALMUH6kky2ZBeAndn sdo/6p00brJkUmkOT45F+SrIAWc1DqXTE1TkNQqVGb/0RL04teoHdW6kEtBMknRs bX0bSh1I7D2vEVVQshhXz1iUlWcFAhIBsXOHjwMDxMW8lvDQD+iN/c9/h9jwwDu3 LkRDz6SIoGLq2nPEYvcRVw3QjMaKQiw4vkDTbTtH98Ue+ActH2hDQT5MchfBniTu TRO+7bByNS6TtIwT/VZSekNtTdY9WsaZz8X0ST2pdhMwy1e+qdYytU20u80gK2OR r9S6IqTGGNVublULd/VK4ALaY/zd7oWo9svy+RH/ZohFhbRrZzk= =ujnY -----END PGP SIGNATURE-----