CVS commit: pkgsrc/www/py-django

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Jul 10 08:33:36 UTC 2026

Modified Files:
        pkgsrc/www/py-django: Makefile distinfo

Log Message:
py-django: updated to 6.0.7

6.0.7

Django 6.0.7 fixes three security issues with severity “low” and one bug in 6.0.6.

CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response
CVE-2026-53877: Heap buffer over-read in GDALRaster
CVE-2026-53878: Header injection possibility since DomainNameValidator accepted newlines in input

Bugfixes

Fixed a regression in Django 6.0 where the PBKDF2 and MD5 password hashers
raised UnicodeDecodeError for bytes passwords that were not valid UTF-8.
Passwords supplied as str or as UTF-8 bytes are unaffected


To generate a diff of this commit:
cvs rdiff -u -r1.156 -r1.157 pkgsrc/www/py-django/Makefile
cvs rdiff -u -r1.128 -r1.129 pkgsrc/www/py-django/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django/Makefile
diff -u pkgsrc/www/py-django/Makefile:1.156 pkgsrc/www/py-django/Makefile:1.157
--- pkgsrc/www/py-django/Makefile:1.156 Thu Jun  4 09:19:59 2026
+++ pkgsrc/www/py-django/Makefile       Fri Jul 10 08:33:36 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.156 2026/06/04 09:19:59 adam Exp $
+# $NetBSD: Makefile,v 1.157 2026/07/10 08:33:36 adam Exp $
 
-DISTNAME=      django-6.0.6
+DISTNAME=      django-6.0.7
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

Index: pkgsrc/www/py-django/distinfo
diff -u pkgsrc/www/py-django/distinfo:1.128 pkgsrc/www/py-django/distinfo:1.129
--- pkgsrc/www/py-django/distinfo:1.128 Thu Jun  4 09:19:59 2026
+++ pkgsrc/www/py-django/distinfo       Fri Jul 10 08:33:36 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.128 2026/06/04 09:19:59 adam Exp $
+$NetBSD: distinfo,v 1.129 2026/07/10 08:33:36 adam Exp $
 
-BLAKE2s (django-6.0.6.tar.gz) = d61586d8458be72e2d9d90d31d55a0024cabc9d7c7779d7416473d68c69ec43d
-SHA512 (django-6.0.6.tar.gz) = 0e8d651d2efa1c368b2177ae48e3a3e17656ab28d1655a3b561acac88558c1db66160461e79b2ef6d589fb589e1afa90e63c5f51d28a215c4abb91de1299f01b
-Size (django-6.0.6.tar.gz) = 10905525 bytes
+BLAKE2s (django-6.0.7.tar.gz) = 0e09fda8642a1ba5556007cdc90eef2efd942d5b4b86d9a1aed4097a9cb2e8fe
+SHA512 (django-6.0.7.tar.gz) = c9566b26b31d1f6a10de99621e8e9d8e0be1c6b33c643fad00c46f8a2049c7fa47a38b7a9fe51605ee41c0d8a14c27a3ff6bc771910190daf473fe05379690db
+Size (django-6.0.7.tar.gz) = 10921299 bytes