Bug#407521: Security fix for Django auth

2007-01-19 Thread Marc Fargas
Thanks for the explanation, maybe in 500~1000 more I'll know how to tag them properly!! hehehe. By the way, thanks a lot for packaging django for debian On 1/19/07, Raphael Hertzog [EMAIL PROTECTED] wrote: On Fri, 19 Jan 2007, Marc Fargas wrote: Hi Raphael, Hi Marc, I just read at

Bug#407521: Security fix for Django auth

2007-01-19 Thread Raphael Hertzog
On Fri, 19 Jan 2007, Marc Fargas wrote: Hi Raphael, Hi Marc, I just read at http://www.us.debian.org/Bugs/Developer.en.html#severities and took the one that made more sense to me, there the only severity that talks about security is critical so I took that. I'm not a bug vodoo, I was just

Bug#407521: Security fix for Django auth

2007-01-19 Thread Marc Fargas
Hi Raphael, I just read at http://www.us.debian.org/Bugs/Developer.en.html#severities and took the one that made more sense to me, there the only severity that talks about security is critical so I took that. I'm not a bug vodoo, I was just trying to give a hand marking bugs. Anyway, it's always

Bug#407521: Security fix for Django auth

2007-01-19 Thread Raphael Hertzog
severity 407521 important thanks On Fri, 19 Jan 2007, Marc Fargas wrote: severity critical tags +patch thanks The current Django versión in Debian has a security hole, so this bug should be critical, and the patch recommended by the submitter should be applied and brought to etch, I

Bug#407521: Security fix for Django auth

2007-01-19 Thread Marc Fargas
severity critical tags +patch thanks The current Django versión in Debian has a security hole, so this bug should be critical, and the patch recommended by the submitter should be applied and brought to etch, I think. Cheers, Marc.

Bug#407521: Security fix for Django auth system

2007-01-19 Thread James Bennett
Package: python-django Version: 0.95-2 A bug in Django's AuthenticationMiddleware was discovered and patched after the 0.95 release; this bug can cause apparent caching of the value of request.user between requests, possibly resulting in inappropriate access when a user is perceived to be