kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

py-django2: updated to 2.2.13

Browse source 
Django 2.2.13 fixes two security issues and a regression in 2.2.12.

CVE-2020-13254: Potential data leakage via malformed memcached keys

In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage. In order to avoid this vulnerability, key validation is added to the memcached cache backends.

CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget

Query parameters for the admin ForeignKeyRawIdWidget were not properly URL encoded, posing an XSS attack vector. ForeignKeyRawIdWidget now ensures query parameters are correctly URL encoded.

Bugfixes

Fixed a regression in Django 2.2.12 that affected translation loading for apps providing translations for territorial language variants as well as a generic language, where the project has different plural equations for the language.
Tracking a jQuery security release, upgraded the version of jQuery used by the admin from 3.3.1 to 3.5.1.
This commit is contained in:
adam 2020-06-03 15:28:38 +00:00
parent a07c084088
commit 71cc5d8975
2 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
www/py-django2/Makefile
View file

@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.27 2020/04/06 16:58:56 adam Exp $
# $NetBSD: Makefile,v 1.28 2020/06/03 15:28:38 adam Exp $
DISTNAME= Django-2.2.12
DISTNAME= Django-2.2.13
PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl}
CATEGORIES= www python
MASTER_SITES= https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

10
www/py-django2/distinfo
View file

@ -1,6 +1,6 @@
$NetBSD: distinfo,v 1.25 2020/04/06 16:58:56 adam Exp $
$NetBSD: distinfo,v 1.26 2020/06/03 15:28:38 adam Exp $
SHA1 (Django-2.2.12.tar.gz) = 5df3303956e1e7f506dc382a79375276131ac709
RMD160 (Django-2.2.12.tar.gz) = f2fc964169a46a083da047193ffb0be88afd55fa
SHA512 (Django-2.2.12.tar.gz) = 3c01b606e34dd0abe5a03bc55bf7d9328a0da370c22bac4d15c3468512b26ad57fd07d942a2a34129ce18bcc5e86c67e163d0f4d5b7ea47e3e899ba7617ab28c
Size (Django-2.2.12.tar.gz) = 8877061 bytes
SHA1 (Django-2.2.13.tar.gz) = 7180a364ab9d630c4466a0cbd69b14726f3110f3
RMD160 (Django-2.2.13.tar.gz) = 9fb4780499aea6b3d9c1e2255efa048809c89f2c
SHA512 (Django-2.2.13.tar.gz) = 6daf3486d2f19eb159193df77a7525e5173ba5889ad5c587a6ec6bbf02c4ea94fa90b9a30a5310932fc9353a22c413208ab724c05740f844eccfe610da3ca68a
Size (Django-2.2.13.tar.gz) = 8879757 bytes