CVS commit: pkgsrc/www/py-django3

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Feb  5 07:55:02 UTC 2021

Modified Files:
        pkgsrc/www/py-django3: Makefile distinfo

Log Message:
py-django3: updated to 3.1.6

Django 3.1.6 fixes a security issue with severity “low” and a bug in 3.1.5.

CVE-2021-3281: Potential directory-traversal via archive.extract()

The django.utils.archive.extract() function, used by startapp --template and startproject --template, allowed directory-traversal via an archive with absolute paths or relative paths with dot 
segments.

Bugfixes

Fixed an admin layout issue in Django 3.1 where changelist filter controls would become squashed


To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/py-django3/Makefile \
    pkgsrc/www/py-django3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django3/Makefile
diff -u pkgsrc/www/py-django3/Makefile:1.11 pkgsrc/www/py-django3/Makefile:1.12
--- pkgsrc/www/py-django3/Makefile:1.11 Wed Jan  6 12:17:15 2021
+++ pkgsrc/www/py-django3/Makefile      Fri Feb  5 07:55:02 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.11 2021/01/06 12:17:15 adam Exp $
+# $NetBSD: Makefile,v 1.12 2021/02/05 07:55:02 adam Exp $
 
-DISTNAME=      Django-3.1.5
+DISTNAME=      Django-3.1.6
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
Index: pkgsrc/www/py-django3/distinfo
diff -u pkgsrc/www/py-django3/distinfo:1.11 pkgsrc/www/py-django3/distinfo:1.12
--- pkgsrc/www/py-django3/distinfo:1.11 Wed Jan  6 12:17:15 2021
+++ pkgsrc/www/py-django3/distinfo      Fri Feb  5 07:55:02 2021
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.11 2021/01/06 12:17:15 adam Exp $
+$NetBSD: distinfo,v 1.12 2021/02/05 07:55:02 adam Exp $
 
-SHA1 (Django-3.1.5.tar.gz) = b5933f22e2b7f132ddc057bcecf1e56237f91a07
-RMD160 (Django-3.1.5.tar.gz) = 02482834b21846c4b850195d1bba8e1579c3b32e
-SHA512 (Django-3.1.5.tar.gz) = b8f0e034fcd282d6e4a9e42565da5d5f4750c900264bed10e72b8c1866370f75fd1bc856d22950e1d3ad03229c38559989a26ccc9f1252ea31d407410134a548
-Size (Django-3.1.5.tar.gz) = 9257571 bytes
+SHA1 (Django-3.1.6.tar.gz) = 762d7659334921e4148603fc5a1d70832f955ac6
+RMD160 (Django-3.1.6.tar.gz) = c9870fde720153b78f31a5c55b32a989169b7748
+SHA512 (Django-3.1.6.tar.gz) = fe5baef4aee51cc84292d1f4d3681cff8170c1307aa172b86faa15771af2c3e0b4dbb24ae671ad8ed31c53ab38ed99c64b5deb69d77fc268d8a232f3463c3221
+Size (Django-3.1.6.tar.gz) = 9645871 bytes