pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/www/py-django2 py-django2: updated to 2.2.25



details:   https://anonhg.NetBSD.org/pkgsrc/rev/f3bc0cf98e89
branches:  trunk
changeset: 771146:f3bc0cf98e89
user:      adam <adam%pkgsrc.org@localhost>
date:      Tue Dec 14 08:57:48 2021 +0000

description:
py-django2: updated to 2.2.25

2.2.25:

CVE-2021-44420: Potential bypass of an upstream access control based on URL paths

HTTP requests for URLs with trailing newlines could bypass an upstream access control based on URL paths.

diffstat:

 www/py-django2/Makefile |  4 ++--
 www/py-django2/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (25 lines):

diff -r 46a6c108c7b5 -r f3bc0cf98e89 www/py-django2/Makefile
--- a/www/py-django2/Makefile   Tue Dec 14 08:56:06 2021 +0000
+++ b/www/py-django2/Makefile   Tue Dec 14 08:57:48 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.36 2021/06/05 07:24:55 adam Exp $
+# $NetBSD: Makefile,v 1.37 2021/12/14 08:57:48 adam Exp $
 
-DISTNAME=      Django-2.2.24
+DISTNAME=      Django-2.2.25
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
diff -r 46a6c108c7b5 -r f3bc0cf98e89 www/py-django2/distinfo
--- a/www/py-django2/distinfo   Tue Dec 14 08:56:06 2021 +0000
+++ b/www/py-django2/distinfo   Tue Dec 14 08:57:48 2021 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.36 2021/10/26 11:30:34 nia Exp $
+$NetBSD: distinfo,v 1.37 2021/12/14 08:57:48 adam Exp $
 
-BLAKE2s (Django-2.2.24.tar.gz) = f26bc9a082265c7fa1a3ab012e5bee5a951b22c2cac2caf52fad41dbf10b7d75
-SHA512 (Django-2.2.24.tar.gz) = 5a3ee79500ad458bfc5220b9b68248bec59bf6d2304d58ca280111854d6a5f7e25784680e949487e8b59c1de0b329a53cf0676d2ee4bb2b88463918c4b0b6085
-Size (Django-2.2.24.tar.gz) = 9211396 bytes
+BLAKE2s (Django-2.2.25.tar.gz) = e36ecf01dce63154767e67022e29d888bb1038371ec333fa7b563887aeafa6fd
+SHA512 (Django-2.2.25.tar.gz) = c3d377c8d1ce54c93477615cff1cc74fc21791bc9db6b059787e07d0bc25b4d0c1a5804bf781d45ebba1f5f5c280957cff2bba063fea4fc005a1e945b9a7fa8f
+Size (Django-2.2.25.tar.gz) = 9185326 bytes



Home | Main Index | Thread Index | Old Index