pool/python-Django
SHA256
17
0
Fork 4
Code Issues Pull Requests Activity

Accepting request 977871 from home:aplanas:branches:devel:languages:python:django

Browse Source 
- Update to 4.0.4
  + CVE-2022-28346: Potential SQL injection in "QuerySet.annotate()",
    "aggregate()", and "extra()"
  + CVE-2022-28347: Potential SQL injection via
    "QuerySet.explain(**options)" on PostgreSQL

OBS-URL: https://build.opensuse.org/request/show/977871
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=103
This commit is contained in:
Alberto Planas
2022-05-18 06:46:00 +00:00
committed by Git OBS Bridge
parent 82bdf0c029
commit 80a7eee3e0
7 changed files with 198 additions and 229 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
python-Django.changes
View File

@@ -1,3 +1,12 @@
-------------------------------------------------------------------
Mon Apr 11 14:21:09 UTC 2022 - Alberto Planas Dominguez <aplanas@suse.com>
- Update to 4.0.4
+ CVE-2022-28346: Potential SQL injection in "QuerySet.annotate()",
"aggregate()", and "extra()"
+ CVE-2022-28347: Potential SQL injection via
"QuerySet.explain(**options)" on PostgreSQL
-------------------------------------------------------------------
Tue Mar 1 10:49:51 UTC 2022 - Alberto Planas Dominguez <aplanas@suse.com>