diff options
| author | wen <wen> | 2016-10-21 02:19:46 +0000 |
|---|---|---|
| committer | wen <wen> | 2016-10-21 02:19:46 +0000 |
| commit | b3a8fdf9acc6663023da395a72b043321c534acb (patch) | |
| tree | 89ef93fb563bd1d32ed3da2dc8c2750321884447 /www/py-django/distinfo | |
| parent | 93e22b2082014ea466ab4df8fa2b37426a126e30 (diff) | |
| download | pkgsrc-b3a8fdf9acc6663023da395a72b043321c534acb.tar.gz | |
Update to 1.9.10(security update)
Upstream changes:
Django 1.9.10 release notes
September 26, 2016
Django 1.9.10 fixes a security issue in 1.9.9.
CSRF protection bypass on a site with Google Analytics
An interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection.
The parser for request.COOKIES is simplified to better match the behavior of browsers and to mitigate this attack. request.COOKIES may now contain cookies that are invalid according to RFC 6265 but are possible to set via document.cookie.
Diffstat (limited to 'www/py-django/distinfo')
| -rw-r--r-- | www/py-django/distinfo | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/www/py-django/distinfo b/www/py-django/distinfo index 43cfe5be61c..af896fcebe0 100644 --- a/www/py-django/distinfo +++ b/www/py-django/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.58 2016/08/04 08:23:11 adam Exp $ +$NetBSD: distinfo,v 1.59 2016/10/21 02:19:46 wen Exp $ -SHA1 (Django-1.9.9.tar.gz) = 2f971cfb115681cb30be5d9496a6e3f3369679cd -RMD160 (Django-1.9.9.tar.gz) = 905417d93145fa3f5d1c58bd8d08ae07d0e18760 -SHA512 (Django-1.9.9.tar.gz) = 5f8e353ad3143a17dac95bf913838b6c265c9540d6d9b8345538ca551a4086c4458e16f550ff7ef2ea447119dfa14a4230c30ec122068698c442a9846cf1794a -Size (Django-1.9.9.tar.gz) = 7493187 bytes +SHA1 (Django-1.9.10.tar.gz) = ec0acd8b5a8367c871ef715c9d2f4b66010b3c8d +RMD160 (Django-1.9.10.tar.gz) = 4cdb76aba3bf4364b44b6f549bbb6497bb74870f +SHA512 (Django-1.9.10.tar.gz) = b8ad1c0904f019dc186589e163649265d3fdf21bb634823d869c58902f69a7b8fcc2e8937cc6a8cb5497889962f52498b30115a5add56cb065ac74e56dc3f2c0 +Size (Django-1.9.10.tar.gz) = 7494610 bytes |