Bug#481164: python-django: Security updates for all Django versions

2008-05-18 Thread Nico Golde
retitle 481164 python-django: CVE-2008-2302 cross-site scripting vulnerability thanks Hi, CVE-2008-2302 was assigned to this. Please mention this CVE id in your changelog when closing this bug. I also doubt that this issue is important enough to justify a DSA, however please contact the stable

Bug#481164: python-django: Security updates for all Django versions

2008-05-14 Thread Raphael Hertzog
Package: python-django Version: 0.97~svn7189-1 Severity: grave Tags: security Justification: user security hole http://www.djangoproject.com/weblog/2008/may/14/security/ Updates need to be prepared for etch, sid/lenny, and experimental. Brett, can you take care of all this? (Also handling the