Source: djangorestframework
Version: 2.3.14-1
Severity: Grave

This package depends on python-oauth2 which has unresolved security issues
(#722656, #722657), no longer available in testing, and no longer
maintained upstream.

djangorestframework needs to be updated (if possible) to use
python-oauthlib instead.

See http://lists.debian.org/52f86a59.9000...@debian.org
-- 
Brian May <br...@microcomaustralia.com.au>

Reply via email to