Luciano Bello pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
6793b723 by Luciano Bello at 2018-04-01T08:48:24-04:00
DSA-4160-1 python-django

- - - - -
57e712be by Luciano Bello at 2018-04-01T09:10:40-04:00
merge

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -4083,10 +4083,12 @@ CVE-2018-7537 (An issue was discovered in Django 2.0 
before 2.0.3, 1.11 before .
        {DLA-1303-1}
        - python-django 1:1.11.11-1
        NOTE: 
https://www.djangoproject.com/weblog/2018/mar/06/security-releases/
+       NOTE: Patch 
https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539
 CVE-2018-7536 (An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 
...)
        {DLA-1303-1}
        - python-django 1:1.11.11-1
        NOTE: 
https://www.djangoproject.com/weblog/2018/mar/06/security-releases/
+       NOTE: Patch 
https://github.com/django/django/commit/abf89d729f210c692a50e0ad3f75fb6bec6fae16
 CVE-2018-7535
        RESERVED
 CVE-2018-7534


=====================================
data/DSA/list
=====================================
--- a/data/DSA/list
+++ b/data/DSA/list
@@ -1,3 +1,7 @@
+[01 Apr 2018] DSA-4161-1 python-django - security update
+       {CVE-2018-7536 CVE-2018-7537}
+       [jessie] - python-django 1.7.11-1+deb8u3
+       [stretch] - python-django 1:1.10.7-2+deb9u1
 [01 Apr 2018] DSA-4160-1 libevt - security update
        {CVE-2018-8754}
        [stretch] - libevt 20170120-1+deb9u1


=====================================
data/dsa-needed.txt
=====================================
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -68,10 +68,6 @@ phpmyadmin/oldstable (abhijith)
 --
 pjproject
 --
-python-django (luciano)
-  Brian May proposed a debdiff for jessie-security, needs review and ack.
-  stretch-security update needed as well to be done.
---
 qemu/oldstable
 --
 redmine



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/compare/0ffe8e5f7844732121150cade15131c2310e4dca...57e712bebb7d7f8f55758f0c394e2d665a1593d1

---
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/compare/0ffe8e5f7844732121150cade15131c2310e4dca...57e712bebb7d7f8f55758f0c394e2d665a1593d1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to