CVS commit: pkgsrc/www/py-django3

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep 14 10:00:40 UTC 2022

Modified Files:
        pkgsrc/www/py-django3: Makefile distinfo

Log Message:
py-django3: updated to 3.2.15

Django 3.2.15 fixes a security issue with severity “high”

CVE-2022-36359: Potential reflected file download vulnerability in FileResponse¶

An application may have been vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename was derived from user-supplied input. 
The filename is now escaped to avoid this possibility.


To generate a diff of this commit:
cvs rdiff -u -r1.28 -r1.29 pkgsrc/www/py-django3/Makefile
cvs rdiff -u -r1.27 -r1.28 pkgsrc/www/py-django3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django3/Makefile
diff -u pkgsrc/www/py-django3/Makefile:1.28 pkgsrc/www/py-django3/Makefile:1.29
--- pkgsrc/www/py-django3/Makefile:1.28 Wed Apr 20 12:29:47 2022
+++ pkgsrc/www/py-django3/Makefile      Wed Sep 14 10:00:40 2022
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.28 2022/04/20 12:29:47 adam Exp $
+# $NetBSD: Makefile,v 1.29 2022/09/14 10:00:40 adam Exp $
 
-DISTNAME=      Django-3.2.13
+DISTNAME=      Django-3.2.15
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

Index: pkgsrc/www/py-django3/distinfo
diff -u pkgsrc/www/py-django3/distinfo:1.27 pkgsrc/www/py-django3/distinfo:1.28
--- pkgsrc/www/py-django3/distinfo:1.27 Wed Apr 20 12:29:47 2022
+++ pkgsrc/www/py-django3/distinfo      Wed Sep 14 10:00:40 2022
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.27 2022/04/20 12:29:47 adam Exp $
+$NetBSD: distinfo,v 1.28 2022/09/14 10:00:40 adam Exp $
 
-BLAKE2s (Django-3.2.13.tar.gz) = 2546c0988f02e41038b6f14f0ee23300cde9c70faaccd87df25df136becb144b
-SHA512 (Django-3.2.13.tar.gz) = 08f056b18bc04b95d6705cf70c2ecc5be0c1324e0b38582991b907ed5977c4e3d35417ccf4ec06c2436a718e3aae007b015f0d40dd94ce5cfb129a54cceb6578
-Size (Django-3.2.13.tar.gz) = 9813985 bytes
+BLAKE2s (Django-3.2.15.tar.gz) = 5483fa2df47bc46f815334c8bd669047f2e4f7973893520c468494c17693ae12
+SHA512 (Django-3.2.15.tar.gz) = fccdad52d39c8757972d5e987b94b13d8ce5ce08ad480ef79407b0d9b88cff69336770409cbe18ce9529bf10966ad63105a0b0f1ffe39b681a41be3718ec886b
+Size (Django-3.2.15.tar.gz) = 9833828 bytes