1
0
forked from pool/python-Django

- update to 2.2.11

* fix boo#1165022 (CVE-2020-9402) Potential SQL injection via tolerance
   parameter in GIS functions and aggregates on Oracle
 * fix boo#1161919 (CVE-2020-7471) Potential SQL injection via ``StringAgg(delimiter)``

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=54
This commit is contained in:
2020-03-18 11:01:54 +00:00
committed by Git OBS Bridge
parent 9f6f318436
commit 56c5e65c93
6 changed files with 75 additions and 68 deletions

View File

@@ -1,10 +1,16 @@
-------------------------------------------------------------------
Wed Mar 18 10:59:36 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com>
- update to 2.2.11
* fix boo#1165022 (CVE-2020-9402) Potential SQL injection via tolerance
parameter in GIS functions and aggregates on Oracle
-------------------------------------------------------------------
Tue Feb 4 09:42:08 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com>
- update to 2.2.10
- drop pyyaml53.patch
* fix boo#1161919 (CVE-2020 7471) Potential SQL injection via ``StringAgg(delimiter)``
* fix boo#1161919 (CVE-2020-7471) Potential SQL injection via ``StringAgg(delimiter)``
-------------------------------------------------------------------
Wed Jan 15 15:08:32 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com>