CVS commit: pkgsrc/www/py-django4

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Jan 14 15:56:01 UTC 2025

Modified Files:
        pkgsrc/www/py-django4: Makefile distinfo

Log Message:
py-django4: updated to 4.2.18

Django 4.2.18 fixes a security issue with severity “moderate” in 4.2.17.

CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation

Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address 
and is_valid_ipv6_address were vulnerable, as was the django.forms.GenericIPAddressField form field, which has now been updated to define a max_length of 39 characters.

The django.db.models.GenericIPAddressField model field was not affected.


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/py-django4/Makefile
cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/py-django4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django4/Makefile
diff -u pkgsrc/www/py-django4/Makefile:1.10 pkgsrc/www/py-django4/Makefile:1.11
--- pkgsrc/www/py-django4/Makefile:1.10 Wed Dec  4 20:21:06 2024
+++ pkgsrc/www/py-django4/Makefile      Tue Jan 14 15:56:01 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.10 2024/12/04 20:21:06 adam Exp $
+# $NetBSD: Makefile,v 1.11 2025/01/14 15:56:01 adam Exp $
 
-DISTNAME=      Django-4.2.17
+DISTNAME=      Django-4.2.18
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

Index: pkgsrc/www/py-django4/distinfo
diff -u pkgsrc/www/py-django4/distinfo:1.8 pkgsrc/www/py-django4/distinfo:1.9
--- pkgsrc/www/py-django4/distinfo:1.8  Wed Dec  4 20:21:06 2024
+++ pkgsrc/www/py-django4/distinfo      Tue Jan 14 15:56:01 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.8 2024/12/04 20:21:06 adam Exp $
+$NetBSD: distinfo,v 1.9 2025/01/14 15:56:01 adam Exp $
 
-BLAKE2s (Django-4.2.17.tar.gz) = d6915038edd87d51159fc13db5b0dee3ae84a27d612db912e3537163b1f0041a
-SHA512 (Django-4.2.17.tar.gz) = 0811b9416800f3f03fe7eab38f836e130dad67d61117573220b74622e2d47ed71928a200878fe88c444fc5ad33db9e48d0549dfcfeb5482e466278818591ff9c
-Size (Django-4.2.17.tar.gz) = 10437674 bytes
+BLAKE2s (Django-4.2.18.tar.gz) = d895e1608e40dfbb32025b89ca9e777270a70a1d07b649a7eff4c755e197fa61
+SHA512 (Django-4.2.18.tar.gz) = 74469711d0238583c46cadd42737b9002417010796b713a0750c1f28ea17c9c6b2d33e0136fcc5556029a78e0c24b617ae366cb667051c09552298faee791609
+Size (Django-4.2.18.tar.gz) = 10428204 bytes