pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/www/py-django3 py-django3: updated to 3.1.7



details:   https://anonhg.NetBSD.org/pkgsrc/rev/8d36f9beaf00
branches:  trunk
changeset: 447958:8d36f9beaf00
user:      adam <adam%pkgsrc.org@localhost>
date:      Mon Mar 01 12:43:26 2021 +0000

description:
py-django3: updated to 3.1.7

Django 3.1.7 fixes a security issue and a bug in 3.1.6.

CVE-2021-23336: Web cache poisoning via django.utils.http.limited_parse_qsl()

Django contains a copy of urllib.parse.parse_qsl() which was added to backport some security fixes. A further security fix has been issued recently such that parse_qsl() no longer allows using ; as a 
query parameter separator by default. Django now includes this fix. See bpo-42967 for further details.

Bugfixes

Fixed a regression in Django 3.1 that caused RuntimeError instead of connection errors when using only the 'postgres' database

diffstat:

 www/py-django3/Makefile |   4 ++--
 www/py-django3/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (27 lines):

diff -r 958c0e297226 -r 8d36f9beaf00 www/py-django3/Makefile
--- a/www/py-django3/Makefile   Mon Mar 01 12:42:26 2021 +0000
+++ b/www/py-django3/Makefile   Mon Mar 01 12:43:26 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.12 2021/02/05 07:55:02 adam Exp $
+# $NetBSD: Makefile,v 1.13 2021/03/01 12:43:26 adam Exp $
 
-DISTNAME=      Django-3.1.6
+DISTNAME=      Django-3.1.7
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
diff -r 958c0e297226 -r 8d36f9beaf00 www/py-django3/distinfo
--- a/www/py-django3/distinfo   Mon Mar 01 12:42:26 2021 +0000
+++ b/www/py-django3/distinfo   Mon Mar 01 12:43:26 2021 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.12 2021/02/05 07:55:02 adam Exp $
+$NetBSD: distinfo,v 1.13 2021/03/01 12:43:26 adam Exp $
 
-SHA1 (Django-3.1.6.tar.gz) = 762d7659334921e4148603fc5a1d70832f955ac6
-RMD160 (Django-3.1.6.tar.gz) = c9870fde720153b78f31a5c55b32a989169b7748
-SHA512 (Django-3.1.6.tar.gz) = fe5baef4aee51cc84292d1f4d3681cff8170c1307aa172b86faa15771af2c3e0b4dbb24ae671ad8ed31c53ab38ed99c64b5deb69d77fc268d8a232f3463c3221
-Size (Django-3.1.6.tar.gz) = 9645871 bytes
+SHA1 (Django-3.1.7.tar.gz) = 7f08108d90fac2862f8db9344def74229830bc88
+RMD160 (Django-3.1.7.tar.gz) = 3f4a7e32347b3e81ee1a8856c5c03772653d0ca3
+SHA512 (Django-3.1.7.tar.gz) = a8a24f7f25ff2f3a7b5ebe4cef08c7f1303c78bd33f9a53c10630159d6895a738e863dc1034ad0817ad89275c202b4319aa5949ce89f36ca0b537c8a5c0c407c
+Size (Django-3.1.7.tar.gz) = 9673009 bytes



Home | Main Index | Thread Index | Old Index