Accepting request 1283359 from home:mcalabkova:branches:devel:languages:python:django

- Update to 5.2.2 (bsc#1244095)
  * CVE-2025-48432: Potential log injection via unescaped request path
  * Fixed a crash when using select_related against a ForeignObject
    originating from a model with a CompositePrimaryKey
  * Fixed a regression in Django 5.2 that caused a crash when no
    arguments were passed into QuerySet.union().
  * Fixed a regression in Django 5.2 that caused a crash when using OuterRef
    in PostgreSQL aggregate functions ArrayAgg, StringAgg, and JSONBAgg.
  * Fixed a bug in Django 5.2 where HttpRequest.get_preferred_type() did not
    account for media type parameters in Accept headers, reducing specificity
    in content negotiation.

OBS-URL: https://build.opensuse.org/request/show/1283359
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=201
This commit is contained in:
2025-06-06 08:51:39 +00:00
committed by Git OBS Bridge
parent 2e58847883
commit 78064dc5d5
6 changed files with 87 additions and 72 deletions

View File

@@ -1,3 +1,18 @@
-------------------------------------------------------------------
Thu Jun 5 11:53:48 UTC 2025 - Markéta Machová <mmachova@suse.com>
- Update to 5.2.2 (bsc#1244095)
* CVE-2025-48432: Potential log injection via unescaped request path
* Fixed a crash when using select_related against a ForeignObject
originating from a model with a CompositePrimaryKey
* Fixed a regression in Django 5.2 that caused a crash when no
arguments were passed into QuerySet.union().
* Fixed a regression in Django 5.2 that caused a crash when using OuterRef
in PostgreSQL aggregate functions ArrayAgg, StringAgg, and JSONBAgg.
* Fixed a bug in Django 5.2 where HttpRequest.get_preferred_type() did not
account for media type parameters in Accept headers, reducing specificity
in content negotiation.
-------------------------------------------------------------------
Mon May 12 08:20:40 UTC 2025 - Markéta Machová <mmachova@suse.com>