Accepting request 903353 from home:aplanas:branches:devel:languages:python:django

- Update to 3.2.5 (CVE-2021-35042, bsc#1187785)
  + Fixed a regression in Django 3.2 that caused a crash of
    QuerySet.values_list(..., named=True) after prefetch_related()
  + Fixed a bug in Django 3.2 that caused a migration crash on MySQL
    8.0.13+ when altering BinaryField, JSONField, or TextField to
    non-nullable
  + Fixed a regression in Django 3.2 that caused a migration crash on
    MySQL 8.0.13+ when adding nullable BinaryField, JSONField, or
    TextField with a default value
  + Fixed a bug in Django 3.2 where a system check would crash on a
    model with an invalid app_label

OBS-URL: https://build.opensuse.org/request/show/903353
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=88
This commit is contained in:
Markéta Machová 2021-07-02 08:14:22 +00:00 committed by Git OBS Bridge
parent 713157e5df
commit 3040922dbc
6 changed files with 86 additions and 71 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:66c9d8db8cc6fe938a28b7887c1596e42d522e27618562517cc8929eb7e7f296
size 9824343

View File

@ -1,67 +0,0 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
This file contains MD5, SHA1, and SHA256 checksums for the source-code
tarball and wheel files of Django 3.2.4, released June 2, 2021.
To use this file, you will need a working install of PGP or other
compatible public-key encryption software. You will also need to have
the Django release manager's public key in your keyring. This key has
the ID ``E17DF5C82B4F9D00`` and can be imported from the MIT
keyserver, for example, if using the open-source GNU Privacy Guard
implementation of PGP:
gpg --keyserver pgp.mit.edu --recv-key E17DF5C82B4F9D00
or via the GitHub API:
curl https://github.com/carltongibson.gpg | gpg --import -
Once the key is imported, verify this file:
gpg --verify <<THIS FILENAME>>
Once you have verified this file, you can use normal MD5, SHA1, or SHA256
checksumming applications to generate the checksums of the Django
package and compare them to the checksums listed below.
Release packages:
=================
https://www.djangoproject.com/m/releases/3.2/Django-3.2.4-py3-none-any.whl
https://www.djangoproject.com/m/releases/3.2/Django-3.2.4.tar.gz
MD5 checksums
=============
d2975d6084b5740de5838ccf7db3e823 Django-3.2.4-py3-none-any.whl
2f30db9154efb8c9ed891781d29fae2a Django-3.2.4.tar.gz
SHA1 checksums
==============
a6a264af7bcc8906488f72d740022e006e0aeef8 Django-3.2.4-py3-none-any.whl
7b0875627bfd044cbfd3c9dc4b87c653a3cbe2dc Django-3.2.4.tar.gz
SHA256 checksums
================
ea735cbbbb3b2fba6d4da4784a0043d84c67c92f1fdf15ad6db69900e792c10f Django-3.2.4-py3-none-any.whl
66c9d8db8cc6fe938a28b7887c1596e42d522e27618562517cc8929eb7e7f296 Django-3.2.4.tar.gz
-----BEGIN PGP SIGNATURE-----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=gTYU
-----END PGP SIGNATURE-----

3
Django-3.2.5.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3da05fea54fdec2315b54a563d5b59f3b4e2b1e69c3a5841dda35019c01855cd
size 9806547

67
Django-3.2.5.tar.gz.asc Normal file
View File

@ -0,0 +1,67 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
This file contains MD5, SHA1, and SHA256 checksums for the source-code
tarball and wheel files of Django 3.2.5, released July 1, 2021.
To use this file, you will need a working install of PGP or other
compatible public-key encryption software. You will also need to have
the Django release manager's public key in your keyring. This key has
the ID ``2EF56372BA48CD1B`` and can be imported from the MIT
keyserver, for example, if using the open-source GNU Privacy Guard
implementation of PGP:
gpg --keyserver pgp.mit.edu --recv-key 2EF56372BA48CD1B
or via the GitHub API:
curl https://github.com/felixxm.gpg | gpg --import -
Once the key is imported, verify this file:
gpg --verify <<THIS FILENAME>>
Once you have verified this file, you can use normal MD5, SHA1, or SHA256
checksumming applications to generate the checksums of the Django
package and compare them to the checksums listed below.
Release packages:
=================
https://www.djangoproject.com/m/releases/3.2/Django-3.2.5.tar.gz
https://www.djangoproject.com/m/releases/3.2/Django-3.2.5-py3-none-any.whl
MD5 checksums
=============
46e306a5a775cace03a03d5a158ff767 Django-3.2.5.tar.gz
f6eb0de91e191b6e6114ded04a22ee89 Django-3.2.5-py3-none-any.whl
SHA1 checksums
==============
5a1e09930da6c0b1191eb82d466b8549edcb0c4c Django-3.2.5.tar.gz
e48eff0100da4bbf1012f0ffb7bb3067d1987a5f Django-3.2.5-py3-none-any.whl
SHA256 checksums
================
3da05fea54fdec2315b54a563d5b59f3b4e2b1e69c3a5841dda35019c01855cd Django-3.2.5.tar.gz
c58b5f19c5ae0afe6d75cbdd7df561e6eb929339985dbbda2565e1cabb19a62e Django-3.2.5-py3-none-any.whl
-----BEGIN PGP SIGNATURE-----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=6WOu
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,18 @@
-------------------------------------------------------------------
Thu Jul 1 07:50:35 UTC 2021 - Alberto Planas Dominguez <aplanas@suse.com>
- Update to 3.2.5 (CVE-2021-35042, bsc#1187785)
+ Fixed a regression in Django 3.2 that caused a crash of
QuerySet.values_list(..., named=True) after prefetch_related()
+ Fixed a bug in Django 3.2 that caused a migration crash on MySQL
8.0.13+ when altering BinaryField, JSONField, or TextField to
non-nullable
+ Fixed a regression in Django 3.2 that caused a migration crash on
MySQL 8.0.13+ when adding nullable BinaryField, JSONField, or
TextField with a default value
+ Fixed a bug in Django 3.2 where a system check would crash on a
model with an invalid app_label
-------------------------------------------------------------------
Wed Jun 2 10:45:01 UTC 2021 - Alberto Planas Dominguez <aplanas@suse.com>

View File

@ -23,7 +23,7 @@
%bcond_with memcached
Name: python-Django
# We want support LTS versions of Django - numbered 2.2 -> 3.2 -> 4.2 etc
Version: 3.2.4
Version: 3.2.5
Release: 0
Summary: A high-level Python Web framework
License: BSD-3-Clause