CVS commit: pkgsrc/www/py-django3

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Feb  8 22:46:48 UTC 2024

Modified Files:
        pkgsrc/www/py-django3: Makefile PLIST distinfo

Log Message:
py-django3: updated to 3.2.24

Django 3.2.24 fixes a security issue with severity “moderate” in 3.2.23.

CVE-2024-24680: Potential denial-of-service in intcomma template filter

The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.


To generate a diff of this commit:
cvs rdiff -u -r1.36 -r1.37 pkgsrc/www/py-django3/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/py-django3/PLIST
cvs rdiff -u -r1.35 -r1.36 pkgsrc/www/py-django3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django3/Makefile
diff -u pkgsrc/www/py-django3/Makefile:1.36 pkgsrc/www/py-django3/Makefile:1.37
--- pkgsrc/www/py-django3/Makefile:1.36 Wed Nov  1 20:17:00 2023
+++ pkgsrc/www/py-django3/Makefile      Thu Feb  8 22:46:48 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.36 2023/11/01 20:17:00 adam Exp $
+# $NetBSD: Makefile,v 1.37 2024/02/08 22:46:48 adam Exp $
 
-DISTNAME=      Django-3.2.23
+DISTNAME=      Django-3.2.24
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
@@ -11,6 +11,8 @@ HOMEPAGE=     https://www.djangoproject.com/
 COMMENT=       Django, a high-level Python Web framework
 LICENSE=       modified-bsd
 
+TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools
+TOOL_DEPENDS+= ${PYPKGPREFIX}-wheel-[0-9]*:../../devel/py-wheel
 DEPENDS+=      ${PYPKGPREFIX}-asgiref>=3.3.2:../../www/py-asgiref
 DEPENDS+=      ${PYPKGPREFIX}-pytz-[0-9]*:../../time/py-pytz
 DEPENDS+=      ${PYPKGPREFIX}-sqlparse>=0.2.2:../../databases/py-sqlparse
@@ -19,8 +21,6 @@ USE_LANGUAGES=        # none
 
 PYTHON_VERSIONS_INCOMPATIBLE=  27
 
-USE_PKG_RESOURCES=     yes
-
 REPLACE_PYTHON+=       django/bin/django-admin.py
 REPLACE_PYTHON+=       django/conf/project_template/manage.py-tpl
 
@@ -30,5 +30,5 @@ post-install:
        ${MV} django-admin.py django-admin-${PYVERSSUFFIX}.py || ${TRUE}
 
 .include "../../lang/python/application.mk"
-.include "../../lang/python/egg.mk"
+.include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/www/py-django3/PLIST
diff -u pkgsrc/www/py-django3/PLIST:1.3 pkgsrc/www/py-django3/PLIST:1.4
--- pkgsrc/www/py-django3/PLIST:1.3     Wed May  5 07:06:29 2021
+++ pkgsrc/www/py-django3/PLIST Thu Feb  8 22:46:48 2024
@@ -1,13 +1,14 @@
-@comment $NetBSD: PLIST,v 1.3 2021/05/05 07:06:29 adam Exp $
+@comment $NetBSD: PLIST,v 1.4 2024/02/08 22:46:48 adam Exp $
 bin/django-admin-${PYVERSSUFFIX}
 bin/django-admin-${PYVERSSUFFIX}.py
-${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
-${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
-${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
-${PYSITELIB}/${EGG_INFODIR}/entry_points.txt
-${PYSITELIB}/${EGG_INFODIR}/not-zip-safe
-${PYSITELIB}/${EGG_INFODIR}/requires.txt
-${PYSITELIB}/${EGG_INFODIR}/top_level.txt
+${PYSITELIB}/${WHEEL_INFODIR}/AUTHORS
+${PYSITELIB}/${WHEEL_INFODIR}/LICENSE
+${PYSITELIB}/${WHEEL_INFODIR}/LICENSE.python
+${PYSITELIB}/${WHEEL_INFODIR}/METADATA
+${PYSITELIB}/${WHEEL_INFODIR}/RECORD
+${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
+${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
+${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/django/__init__.py
 ${PYSITELIB}/django/__init__.pyc
 ${PYSITELIB}/django/__init__.pyo

Index: pkgsrc/www/py-django3/distinfo
diff -u pkgsrc/www/py-django3/distinfo:1.35 pkgsrc/www/py-django3/distinfo:1.36
--- pkgsrc/www/py-django3/distinfo:1.35 Wed Nov  1 20:17:00 2023
+++ pkgsrc/www/py-django3/distinfo      Thu Feb  8 22:46:48 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.35 2023/11/01 20:17:00 adam Exp $
+$NetBSD: distinfo,v 1.36 2024/02/08 22:46:48 adam Exp $
 
-BLAKE2s (Django-3.2.23.tar.gz) = 55ac30a3bbf6b6f29f6d4da2278d9ce0124ea88621f78d7ec66095b1c3afcbf2
-SHA512 (Django-3.2.23.tar.gz) = a252e4000c932a906eef22d0cb91a9dcb802eb65bbe0fc0eb881216b6801dbef5123b21f51f3208def155852c20e8d7e9adc8339b6386fc49bbc00f7c4d2d4ba
-Size (Django-3.2.23.tar.gz) = 9834665 bytes
+BLAKE2s (Django-3.2.24.tar.gz) = e8b9dcaf3ee03aa69ed676e8911073158834a35e48c2f239c22997abc1eddb8c
+SHA512 (Django-3.2.24.tar.gz) = 840b4c87e159d9714ac816fffb09faba76d3b130a76caffff68b7edd59e9488832ccd8c5ffaa8f0d066f0faa029f6ef2395f6a8e9351eaa1bcbd316d50965fc8
+Size (Django-3.2.24.tar.gz) = 9833004 bytes