[pkgsrc/trunk]: pkgsrc/www/py-django2 py-django2: updated to 2.2.19

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/bf24740af280
branches:  trunk
changeset: 447959:bf24740af280
user:      adam <adam%pkgsrc.org@localhost>
date:      Mon Mar 01 12:44:07 2021 +0000

description:
py-django2: updated to 2.2.19

Django 2.2.19 fixes a security issue in 2.2.18.

CVE-2021-23336: Web cache poisoning via django.utils.http.limited_parse_qsl()

Django contains a copy of urllib.parse.parse_qsl() which was added to backport some security fixes. A further security fix has been issued recently such that parse_qsl() no longer allows using ; as a 
query parameter separator by default. Django now includes this fix. See bpo-42967 for further details.

diffstat:

 www/py-django2/Makefile |   4 ++--
 www/py-django2/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (27 lines):

diff -r 8d36f9beaf00 -r bf24740af280 www/py-django2/Makefile
--- a/www/py-django2/Makefile   Mon Mar 01 12:43:26 2021 +0000
+++ b/www/py-django2/Makefile   Mon Mar 01 12:44:07 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.32 2021/02/05 07:52:37 adam Exp $
+# $NetBSD: Makefile,v 1.33 2021/03/01 12:44:07 adam Exp $
 
-DISTNAME=      Django-2.2.18
+DISTNAME=      Django-2.2.19
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
diff -r 8d36f9beaf00 -r bf24740af280 www/py-django2/distinfo
--- a/www/py-django2/distinfo   Mon Mar 01 12:43:26 2021 +0000
+++ b/www/py-django2/distinfo   Mon Mar 01 12:44:07 2021 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.30 2021/02/05 07:52:37 adam Exp $
+$NetBSD: distinfo,v 1.31 2021/03/01 12:44:07 adam Exp $
 
-SHA1 (Django-2.2.18.tar.gz) = b0f4d5e684f70717113d79dfe44c5d8bf88a826a
-RMD160 (Django-2.2.18.tar.gz) = 629b8566060ac1f51bd7e7f21494991b442a4f69
-SHA512 (Django-2.2.18.tar.gz) = 8c38330042244513576151a9ae64293b9838df42dcb4204713859dd8fcd81154edf42738d0bd05770c9bbe13bfdb1f73781453cf1d14fbc31149a2cb89e34b59
-Size (Django-2.2.18.tar.gz) = 9180844 bytes
+SHA1 (Django-2.2.19.tar.gz) = 7aef80dd858d268cc7dc15e8f3b5a43a5252edda
+RMD160 (Django-2.2.19.tar.gz) = 92fe0035ec141c915a5e06319a2f85755f7938e4
+SHA512 (Django-2.2.19.tar.gz) = 92f2200f147766349526d21b5240307e4f082f97fc5b80b55777330068a9da5eaa9941360ccdd729573d015d9a7a0430461f1ac61f749a0475c006981d8775ea
+Size (Django-2.2.19.tar.gz) = 9209434 bytes