pool/python-Django
SHA256
17
0
Fork 3
Code Issues Pull Requests 2 Activity

CVE-2025-13473 CVE-2025-14550 CVE-2026-1207 CVE-2026-1285 CVE-2026-1287 CVE-2026-1312 #4

Open
mcalabkova wants to merge 2 commits from mcalabkova/python-Django:leap-16.0 into leap-16.0
pull from: mcalabkova/python-Django:leap-16.0
merge into: pool:leap-16.0
Conversation 14 Commits 2 Files Changed 11 +949 -12
mcalabkova commented 2026-02-04 12:07:27 +01:00
Contributor
Copy Link
No description provided.
mcalabkova added 1 commit 2026-02-04 12:07:27 +01:00
CVE-2025-13473 CVE-2025-14550 CVE-2026-1207 CVE-2026-1285 CVE-2026-1287 CVE-2026-1312 239aa42157
autogits_workflow_pr_bot requested review from legaldb 2026-02-04 12:08:09 +01:00
autogits_workflow_pr_bot requested review from maintenance-release-review 2026-02-04 12:08:09 +01:00
autogits_workflow_pr_bot requested review from opensuse-review 2026-02-04 12:08:09 +01:00
maintenance-release-review commented 2026-02-04 12:10:46 +01:00
First-time contributor
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
opensuse-review commented 2026-02-04 12:13:39 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Submitter is member of this review group, hence they are excluded from being one of the reviewers here

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state. Submitter is member of this review group, hence they are excluded from being one of the reviewers here
legaldb commented 2026-02-04 12:25:30 +01:00
Member
Copy Link

Legal reviewed as acceptable:

Accepted because previously reviewed under the same license (496895)
Legal reviewed as [acceptable](https://legaldb.suse.de/reviews/details/503113): ``` Accepted because previously reviewed under the same license (496895) ```
report.md
1.6 KiB
legaldb approved these changes 2026-02-04 12:25:30 +01:00
Dismissed
msmeissn commented 2026-02-04 13:05:46 +01:00
First-time contributor
Copy Link

@maintenance-release-review: approve

@maintenance-release-review: approve
maintenance-release-review approved these changes 2026-02-04 13:11:19 +01:00
Dismissed
maintenance-release-review left a comment
First-time contributor
Copy Link

msmeissn approved a review on behalf of maintenance-release-review

msmeissn approved a review on behalf of maintenance-release-review
rfrohl commented 2026-02-04 13:46:25 +01:00
First-time contributor
Copy Link

@mcalabkova FYI: there are failing test [0], maybe something is missing with the patches ?

[0] https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-16.0:PullRequest:393/python-Django/standard/x86_64

@mcalabkova FYI: there are failing test [0], maybe something is missing with the patches ? [0] https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-16.0:PullRequest:393/python-Django/standard/x86_64
mcalabkova added 1 commit 2026-02-04 14:30:23 +01:00
Add test_strip_tags_incomplete.patch 53638080fd
mcalabkova dismissed legaldb's review 2026-02-04 14:30:24 +01:00
Reason:

New commits pushed, approval review dismissed automatically according to repository settings

mcalabkova dismissed maintenance-release-review's review 2026-02-04 14:30:24 +01:00
Reason:

New commits pushed, approval review dismissed automatically according to repository settings

autogits_workflow_pr_bot requested review from legaldb 2026-02-04 14:30:27 +01:00
autogits_workflow_pr_bot requested review from maintenance-release-review 2026-02-04 14:30:28 +01:00
maintenance-release-review commented 2026-02-04 14:31:58 +01:00
First-time contributor
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
opensuse-review commented 2026-02-04 14:35:05 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Submitter is member of this review group, hence they are excluded from being one of the reviewers here

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state. Submitter is member of this review group, hence they are excluded from being one of the reviewers here
legaldb commented 2026-02-04 14:46:25 +01:00
Member
Copy Link

Legal reviewed as acceptable:

Accepted because previously reviewed under the same license (496895)
Legal reviewed as [acceptable](https://legaldb.suse.de/reviews/details/503151): ``` Accepted because previously reviewed under the same license (496895) ```
report.md
1.6 KiB
legaldb approved these changes 2026-02-04 14:46:26 +01:00
mcalabkova commented 2026-02-04 14:50:57 +01:00
Author
Contributor
Copy Link

@mcalabkova FYI: there are failing test [0], maybe something is missing with the patches ?

[0] https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-16.0:PullRequest:393/python-Django/standard/x86_64

Hi, the issue is yet another CVE fixed in the python interpreter, changing its behaviour slightly.

> @mcalabkova FYI: there are failing test [0], maybe something is missing with the patches ? > > [0] https://build.opensuse.org/package/live_build_log/openSUSE:Backports:SLE-16.0:PullRequest:393/python-Django/standard/x86_64 Hi, the issue is yet another CVE fixed in the python interpreter, changing its behaviour slightly.
eroca commented 2026-02-04 15:35:07 +01:00
Owner
Copy Link

@opensuse-review : approve

LGTM

@opensuse-review : approve LGTM
eroca commented 2026-02-04 15:35:08 +01:00
Owner
Copy Link

merge ok

merge ok
opensuse-review approved these changes 2026-02-04 15:35:44 +01:00
opensuse-review left a comment
Member
Copy Link

eroca approved a review on behalf of opensuse-review

eroca approved a review on behalf of opensuse-review
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u leap-16.0:mcalabkova-leap-16.0
git checkout mcalabkova-leap-16.0
Sign in to join this conversation.
Reviewers
No Reviewers
maintenance-release-review
legaldb
opensuse-review
Labels
Clear labels
legaldb
Critical Priority
Critical legaldb priority
Archived
legaldb
High Priority
2
High legaldb priority
legaldb
Normal Priority
1
Normal legaldb priority
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
adamm_super adrianSuSE autobuild-owner autobuild-review autogits_workflow_pr_bot bigironman dirkmueller eroca factory_bot gitea_test legaldb lkocman-factory maxlin_factory opensuse-review packagehub-review smithfarm
No Assignees
7 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: pool/python-Django#4
Delete Branch "mcalabkova/python-Django:leap-16.0"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?