Django

Code

Show
Ignore:
Timestamp:
10/26/07 14:52:16 (1 year ago)
Author:
jacob
Message:

i18n security fix. Details will be posted shortly to the Django mailing lists and the official weblog.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • django/branches/0.95-bugfixes/docs/release_notes_0.95.txt

    r4384 r6606  
    11=================================== 
    2 Django version 0.95.1 release notes 
     2Django version 0.95.2 release notes 
    33=================================== 
    44 
    5  
    6 Welcome to the Django 0.95.1 release. 
     5Welcome to the Django 0.95.2 release. 
    76 
    87This represents a significant advance in Django development since the 0.91 
    …… 
    108107      package Django uses to launch its FastCGI server, which prevents 
    109108      tracebacks from bubbling up during production use. 
     109       
     110    * A security fix to the i18n framework which could allow an  
     111      attacker to send extremely large strings in the Accept-Language  
     112      header and cause a denial of service by filling available memory. 
    110113 
    111114Because these problems weren't discovered and fixed until after the