-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Oct 2022 07:42:45 -0700 Source: python-django Built-For-Profiles: nocheck Architecture: source Version: 3:4.1.2-1 Distribution: experimental Urgency: high Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Changes: python-django (3:4.1.2-1) experimental; urgency=high . * New upstream security release. <https://www.djangoproject.com/weblog/2022/oct/04/security-releases/> . - CVE-2022-41323: Prevent a potential denial-of-service vulnerability in internationalized URLs. Internationalised URLs were subject to potential denial of service attack via the locale parameter. This is now escaped to avoid this possibility. Checksums-Sha1: 66393a84fa6e64febed63cdab6b28e6122e2165b 2782 python-django_4.1.2-1.dsc 595809cc2bfc04b35bece44b570f74e3d0e7b94c 10509111 python-django_4.1.2.orig.tar.gz 7d21c7445d0cae086911e7aad5194a5b0e15e778 28292 python-django_4.1.2-1.debian.tar.xz 56df3ae6b1a41500d794be8eabead231e4bb66f1 7875 python-django_4.1.2-1_amd64.buildinfo Checksums-Sha256: cf2c4c48292ef5a9542ec6316af6480131d1879f635991e8e763f22a02864af0 2782 python-django_4.1.2-1.dsc b8d843714810ab88d59344507d4447be8b2cf12a49031363b6eed9f1b9b2280f 10509111 python-django_4.1.2.orig.tar.gz b061e9ce1780e6a67b871a9a8d8d71e4d5f25e4b18ebe8164a35887883d65560 28292 python-django_4.1.2-1.debian.tar.xz 24a8ef1c5a600f242768c367f9a0bb36a3886cfe8c4584029338b1f71f7deb2a 7875 python-django_4.1.2-1_amd64.buildinfo Files: a962e4bab5c25b15bbd14607aa6528ef 2782 python optional python-django_4.1.2-1.dsc 92371e5a9e99f70629b52973563f106a 10509111 python optional python-django_4.1.2.orig.tar.gz 22bc24302e2aa316e9212cb45a14c21c 28292 python optional python-django_4.1.2-1.debian.tar.xz 97645e1a0de942c4f74aaf4a74e7518d 7875 python optional python-django_4.1.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmM8SAcACgkQHpU+J9Qx HlhQjQ//UjyBevFQ+mmdr3b0ms9V22qZtbQ8gzzL1GDGi1lxiXUNO3N7cSd6g7p9 b04eQ8TH/3MGNkL87u1HUmSOZ/5B0s/Z0eub/tX1Dck6KRzatL13qgtc7Z5OOf9L kfSd+BqngLV0MkGJSmkkqqMSMNDqWkoD3Gr2Fj7QGvFNuzQjjfUKwRM/PMUI7xsj SlIiVPUUlUzJPClygF8/4c/bwbtNSct/6I5zRp2cr0OhHa5evCXL9GXIhZdEfs+G oyl2NGe8b2ThjGud7f9NqwplKNaUJOTowy0bDiXRrLFI0z1xJyKQevSz+hfrni6Y Bmwtto4vB9jDcyrnRvYcQjLDLeeezFK+q1l9mKbGgRfpzBAc2pCl7uY7poZOMgx3 KxKpOCmbLCieV7Cpta+I/JlAVd/iND12hyV/dLlitvvJqtxxcJ43XLP54gxB9VCB m1WOs1c481zsCGthCSKFPKzqZ/JBE8g1bZ+p2v41wEi/xS7GQCuJWYnzCNKsg0CK sXeh4ToioBXIyFSbngVi1PtD5+vz0ReX8FK1qFtouuWbcU2oNDR4iNY/z6GuWlY2 8skOGqvMuzvETk+qg1AZ4STQFHVrY0clmcL7Wv5n2FQ8pNAMbC8oZFj1m4G8A4mb A0jVJGn0PTe0jwb57AcmZxSz3uWqVksL89Yyj24CLzYvutFzG2A= =yuDC -----END PGP SIGNATURE-----