diff options
| author | adam <adam@pkgsrc.org> | 2020-06-03 15:28:38 +0000 |
|---|---|---|
| committer | adam <adam@pkgsrc.org> | 2020-06-03 15:28:38 +0000 |
| commit | 73fcd9578d2885f8b5356813ee167fe9c6d682d2 (patch) | |
| tree | f208e7a2c57fb9d493a74d2d1612fed1c37dff4e /www/py-django2 | |
| parent | 5f2a54f7764e866389fb3c804968151c8fb1611d (diff) | |
| download | pkgsrc-73fcd9578d2885f8b5356813ee167fe9c6d682d2.tar.gz | |
py-django2: updated to 2.2.13
Django 2.2.13 fixes two security issues and a regression in 2.2.12.
CVE-2020-13254: Potential data leakage via malformed memcached keys
In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage. In order to avoid this vulnerability, key validation is added to the memcached cache backends.
CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget
Query parameters for the admin ForeignKeyRawIdWidget were not properly URL encoded, posing an XSS attack vector. ForeignKeyRawIdWidget now ensures query parameters are correctly URL encoded.
Bugfixes
Fixed a regression in Django 2.2.12 that affected translation loading for apps providing translations for territorial language variants as well as a generic language, where the project has different plural equations for the language.
Tracking a jQuery security release, upgraded the version of jQuery used by the admin from 3.3.1 to 3.5.1.
Diffstat (limited to 'www/py-django2')
| -rw-r--r-- | www/py-django2/Makefile | 4 | ||||
| -rw-r--r-- | www/py-django2/distinfo | 10 |
2 files changed, 7 insertions, 7 deletions
diff --git a/www/py-django2/Makefile b/www/py-django2/Makefile index 2b5da21dbfc..fda6236c515 100644 --- a/www/py-django2/Makefile +++ b/www/py-django2/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.27 2020/04/06 16:58:56 adam Exp $ +# $NetBSD: Makefile,v 1.28 2020/06/03 15:28:38 adam Exp $ -DISTNAME= Django-2.2.12 +DISTNAME= Django-2.2.13 PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl} CATEGORIES= www python MASTER_SITES= https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/ diff --git a/www/py-django2/distinfo b/www/py-django2/distinfo index cbfa679685a..fd99dec873a 100644 --- a/www/py-django2/distinfo +++ b/www/py-django2/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.25 2020/04/06 16:58:56 adam Exp $ +$NetBSD: distinfo,v 1.26 2020/06/03 15:28:38 adam Exp $ -SHA1 (Django-2.2.12.tar.gz) = 5df3303956e1e7f506dc382a79375276131ac709 -RMD160 (Django-2.2.12.tar.gz) = f2fc964169a46a083da047193ffb0be88afd55fa -SHA512 (Django-2.2.12.tar.gz) = 3c01b606e34dd0abe5a03bc55bf7d9328a0da370c22bac4d15c3468512b26ad57fd07d942a2a34129ce18bcc5e86c67e163d0f4d5b7ea47e3e899ba7617ab28c -Size (Django-2.2.12.tar.gz) = 8877061 bytes +SHA1 (Django-2.2.13.tar.gz) = 7180a364ab9d630c4466a0cbd69b14726f3110f3 +RMD160 (Django-2.2.13.tar.gz) = 9fb4780499aea6b3d9c1e2255efa048809c89f2c +SHA512 (Django-2.2.13.tar.gz) = 6daf3486d2f19eb159193df77a7525e5173ba5889ad5c587a6ec6bbf02c4ea94fa90b9a30a5310932fc9353a22c413208ab724c05740f844eccfe610da3ca68a +Size (Django-2.2.13.tar.gz) = 8879757 bytes |