[pkgsrc/trunk]: pkgsrc/www/py-django Update to 1.9.10(security update)

[wen <wen%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/1785cddb27c8
branches:  trunk
changeset: 354167:1785cddb27c8
user:      wen <wen%pkgsrc.org@localhost>
date:      Fri Oct 21 02:19:46 2016 +0000

description:
Update to 1.9.10(security update)

Upstream changes:
Django 1.9.10 release notes

September 26, 2016

Django 1.9.10 fixes a security issue in 1.9.9.
CSRF protection bypass on a site with Google Analytics

An interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection.

The parser for request.COOKIES is simplified to better match the behavior of browsers and to mitigate this attack. request.COOKIES may now contain cookies that are invalid according to RFC 6265 but 
are possible to set via document.cookie.

diffstat:

 www/py-django/Makefile |   4 ++--
 www/py-django/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (27 lines):

diff -r 8e436fe7f9e0 -r 1785cddb27c8 www/py-django/Makefile
--- a/www/py-django/Makefile    Fri Oct 21 01:47:15 2016 +0000
+++ b/www/py-django/Makefile    Fri Oct 21 02:19:46 2016 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.76 2016/08/28 15:48:36 wiz Exp $
+# $NetBSD: Makefile,v 1.77 2016/10/21 02:19:46 wen Exp $
 
-DISTNAME=      Django-1.9.9
+DISTNAME=      Django-1.9.10
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  http://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
diff -r 8e436fe7f9e0 -r 1785cddb27c8 www/py-django/distinfo
--- a/www/py-django/distinfo    Fri Oct 21 01:47:15 2016 +0000
+++ b/www/py-django/distinfo    Fri Oct 21 02:19:46 2016 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.58 2016/08/04 08:23:11 adam Exp $
+$NetBSD: distinfo,v 1.59 2016/10/21 02:19:46 wen Exp $
 
-SHA1 (Django-1.9.9.tar.gz) = 2f971cfb115681cb30be5d9496a6e3f3369679cd
-RMD160 (Django-1.9.9.tar.gz) = 905417d93145fa3f5d1c58bd8d08ae07d0e18760
-SHA512 (Django-1.9.9.tar.gz) = 5f8e353ad3143a17dac95bf913838b6c265c9540d6d9b8345538ca551a4086c4458e16f550ff7ef2ea447119dfa14a4230c30ec122068698c442a9846cf1794a
-Size (Django-1.9.9.tar.gz) = 7493187 bytes
+SHA1 (Django-1.9.10.tar.gz) = ec0acd8b5a8367c871ef715c9d2f4b66010b3c8d
+RMD160 (Django-1.9.10.tar.gz) = 4cdb76aba3bf4364b44b6f549bbb6497bb74870f
+SHA512 (Django-1.9.10.tar.gz) = b8ad1c0904f019dc186589e163649265d3fdf21bb634823d869c58902f69a7b8fcc2e8937cc6a8cb5497889962f52498b30115a5add56cb065ac74e56dc3f2c0
+Size (Django-1.9.10.tar.gz) = 7494610 bytes