mcalabkova/python-Django
SHA256
1
0
Fork 0
forked from pool/python-Django
Code Pull Requests Activity

Accepting request 833246 from home:mcalabkova:branches:devel:languages:python:django

Browse Source 
- Update to 3.1.1
  * CVE-2020-24583: Incorrect permissions on intermediate-level directories on Python 3.7+
  * CVE-2020-24584: Permission escalation in intermediate-level directories of the file 
    system cache on Python 3.7+
  * Fixed a data loss possibility in the select_for_update(). When using related fields 
    pointing to a proxy model in the of argument, the corresponding model was not locked
  * Fixed a regression in Django 3.1 that caused a crash when decoding an invalid session data
  * Fixed __in lookup on key transforms for JSONField with MariaDB, MySQL, Oracle, and SQLite
  * Fixed a regression in Django 3.1 that caused permission errors in CommonPasswordValidator 
    and settings.py

OBS-URL: https://build.opensuse.org/request/show/833246
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=70
This commit is contained in:
Markéta Machová
2020-09-09 14:32:25 +00:00
committed by Git OBS Bridge
parent cfac3943a3
commit 5240b99e4a
6 changed files with 80 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
python-Django.changes
View File

@@ -1,3 +1,17 @@
-------------------------------------------------------------------
Wed Sep 9 14:14:08 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
- Update to 3.1.1
* CVE-2020-24583: Incorrect permissions on intermediate-level directories on Python 3.7+
* CVE-2020-24584: Permission escalation in intermediate-level directories of the file
system cache on Python 3.7+
* Fixed a data loss possibility in the select_for_update(). When using related fields
pointing to a proxy model in the of argument, the corresponding model was not locked
* Fixed a regression in Django 3.1 that caused a crash when decoding an invalid session data
* Fixed __in lookup on key transforms for JSONField with MariaDB, MySQL, Oracle, and SQLite
* Fixed a regression in Django 3.1 that caused permission errors in CommonPasswordValidator
and settings.py
-------------------------------------------------------------------
Wed Sep 9 03:55:36 UTC 2020 - John Vandenberg <jayvdb@gmail.com>