Ubuntu
python-django-piston package

lp:~jtaylor/ubuntu/oneiric/python-django-piston/fix-884910

Created by Julian Taylor on 2011-11-02 and last modified on 2011-11-30

Get this branch:: bzr branch lp:~jtaylor/ubuntu/oneiric/python-django-piston/fix-884910

Only Julian Taylor can upload to this branch. If you are Julian Taylor please log in for upload directions.

No branches dependent on this one.

Jamie Strandboge: Approve on 2011-11-30

Medium

Fix Released

4. By Julian Taylor on 2011-11-02: * SECURITY UPDATE: remote code execution vulnerability. LP: #884910
   - 02-fix-yaml-load.diff: use yaml.safe_load
   - 03-fix-pickle-load.diff: disable unpickling, backport from 0.2.3
   - https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/
3. By Artur Rona on 2011-01-09: [ Leo Jackson ]
debian/control: Bump Depends on python-oauth 1.0 since we don't
have 1.0.1 yet. Fixes install problem. (LP: #653480)
2. By Michael Ziegler on 2010-02-22: Initial release (Closes: #570919)
1. By Michael Ziegler on 2010-02-22: Import upstream version 0.2.2

This branch contains Public information

Everyone can see this information.