CVS commit: pkgsrc/www/py-django4

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Mar  6 16:06:52 UTC 2025

Modified Files:
        pkgsrc/www/py-django4: Makefile distinfo

Log Message:
py-django4: updated to 4.2.20

Django 4.2.20 fixes a security issue with severity “moderate” in 4.2.19.

CVE-2025-26699: Potential denial-of-service vulnerability in django.utils.text.wrap()

The wrap() and wordwrap template filter were subject to a potential denial-of-service attack when used with very long strings.


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.14 pkgsrc/www/py-django4/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/py-django4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django4/Makefile
diff -u pkgsrc/www/py-django4/Makefile:1.13 pkgsrc/www/py-django4/Makefile:1.14
--- pkgsrc/www/py-django4/Makefile:1.13 Wed Mar  5 10:43:17 2025
+++ pkgsrc/www/py-django4/Makefile      Thu Mar  6 16:06:52 2025
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.13 2025/03/05 10:43:17 wiz Exp $
+# $NetBSD: Makefile,v 1.14 2025/03/06 16:06:52 adam Exp $
 
-DISTNAME=      Django-4.2.19
+DISTNAME=      Django-4.2.20
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
-PKGREVISION=   1
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
 MASTER_SITES+= ${MASTER_SITE_PYPI:=D/Django/}

Index: pkgsrc/www/py-django4/distinfo
diff -u pkgsrc/www/py-django4/distinfo:1.10 pkgsrc/www/py-django4/distinfo:1.11
--- pkgsrc/www/py-django4/distinfo:1.10 Wed Feb  5 20:50:52 2025
+++ pkgsrc/www/py-django4/distinfo      Thu Mar  6 16:06:52 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.10 2025/02/05 20:50:52 adam Exp $
+$NetBSD: distinfo,v 1.11 2025/03/06 16:06:52 adam Exp $
 
-BLAKE2s (Django-4.2.19.tar.gz) = bb761ef39e1a8dff033eb6240955c1a819af62af74ab52f08cb749cffde743dd
-SHA512 (Django-4.2.19.tar.gz) = 4bc7a12d502809f9b65f26d2b0f7f5fab76f37bf5d15f6887ee160e0cf8bb29089f478d280f31bf889e4204f103602069103ab74f058e8721bffb121a7fa27ad
-Size (Django-4.2.19.tar.gz) = 10426865 bytes
+BLAKE2s (Django-4.2.20.tar.gz) = 89b3a34f4b1b03a00e3f4ea0bceffb4ff83c73e4a25a18720e28f0184d5fdda0
+SHA512 (Django-4.2.20.tar.gz) = 6f960772cb95d6cb92ffc29ccec8d53d4f65c371359d350a63653c259288de4047302748008be04b9f4945627e9ef6d52dffa32455acbe26441f49872d73eeec
+Size (Django-4.2.20.tar.gz) = 10432686 bytes