1
0
forked from pool/python-Django

Accepting request 639971 from home:aplanas:branches:devel:languages:python:django

- Update to version 2.1.2
  * CVE-2018-16984: Password hash disclosure to “view only” admin
    users
  * Fixed a regression where nonexistent joins in F() no longer raised
    FieldError (#29727).
  * Fixed a regression where files starting with a tilde or underscore
    weren’t ignored by the migrations loader (#29749).
  * Made migrations detect changes to Meta.default_related_name
    (#29755).
  * Added compatibility for cx_Oracle 7 (#29759).
  * Fixed a regression in Django 2.0 where unique index names weren’t
    quoted (#29778).
  * Fixed a regression where sliced queries with multiple columns with
    the same name crashed on Oracle 12.1 (#29630).
  * Fixed a crash when a user with the view (but not change)
    permission made a POST request to an admin user change form
    (#29809).

OBS-URL: https://build.opensuse.org/request/show/639971
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=12
This commit is contained in:
Ondřej Súkup 2018-10-04 13:58:52 +00:00 committed by Git OBS Bridge
parent dc36a4ad03
commit 20b0cbf787
6 changed files with 88 additions and 67 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e1cc1cd6b658aa4e052f5f2b148bfda08091d7c3558529708342e37e4e33f72c
size 8595422

View File

@ -1,62 +0,0 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
This file contains MD5, SHA1, and SHA256 checksums for the source-code
tarball and wheel files of Django 2.1.1, released August 31, 2018.
To use this file, you will need a working install of PGP or other
compatible public-key encryption software. You will also need to have
the Django release manager's public key in your keyring; this key has
the ID ``E17DF5C82B4F9D00`` and can be imported from the MIT
keyserver. For example, if using the open-source GNU Privacy Guard
implementation of PGP:
gpg --keyserver pgp.mit.edu --recv-key E17DF5C82B4F9D00
Once the key is imported, verify this file::
gpg --verify <<THIS FILENAME>>
Once you have verified this file, you can use normal MD5, SHA1, or SHA256
checksumming applications to generate the checksums of the Django
package and compare them to the checksums listed below.
Release packages:
=================
https://www.djangoproject.com/m/releases/2.1/Django-2.1.1-py3-none-any.whl
https://www.djangoproject.com/m/releases/2.1/Django-2.1.1.tar.gz
MD5 checksums
=============
4ef1290007f8ccb865e27c68dd1aa6cb Django-2.1.1-py3-none-any.whl
06e7c47864e0a38cd99ddabb152b9e9b Django-2.1.1.tar.gz
SHA1 checksums
==============
62071d35dca4f1b779a32aa6e1491fa39bfce518 Django-2.1.1-py3-none-any.whl
c15e7100ab23ec8c33083aa67fada82f362fa224 Django-2.1.1.tar.gz
SHA256 checksums
================
04f2e423f2e60943c02bd2959174b844f7d1bcd19eabb7f8e4282999958021fd Django-2.1.1-py3-none-any.whl
e1cc1cd6b658aa4e052f5f2b148bfda08091d7c3558529708342e37e4e33f72c Django-2.1.1.tar.gz
-----BEGIN PGP SIGNATURE-----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=pyoC
-----END PGP SIGNATURE-----

3
Django-2.1.2.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:efbcad7ebb47daafbcead109b38a5bd519a3c3cd92c6ed0f691ff97fcdd16b45
size 8611286

62
Django-2.1.2.tar.gz.asc Normal file
View File

@ -0,0 +1,62 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
This file contains MD5, SHA1, and SHA256 checksums for the source-code
tarball and wheel files of Django 2.1.2, released October 1, 2018.
To use this file, you will need a working install of PGP or other
compatible public-key encryption software. You will also need to have
the Django release manager's public key in your keyring; this key has
the ID ``E17DF5C82B4F9D00`` and can be imported from the MIT
keyserver. For example, if using the open-source GNU Privacy Guard
implementation of PGP:
gpg --keyserver pgp.mit.edu --recv-key E17DF5C82B4F9D00
Once the key is imported, verify this file::
gpg --verify <<THIS FILENAME>>
Once you have verified this file, you can use normal MD5, SHA1, or SHA256
checksumming applications to generate the checksums of the Django
package and compare them to the checksums listed below.
Release packages:
=================
https://www.djangoproject.com/m/releases/2.1/Django-2.1.2-py3-none-any.whl
https://www.djangoproject.com/m/releases/2.1/Django-2.1.2.tar.gz
MD5 checksums
=============
1c49272e55d2676455b7d03ec1374170 Django-2.1.2-py3-none-any.whl
383ca4e98ad5d0aa9d71378fe743bdef Django-2.1.2.tar.gz
SHA1 checksums
==============
804556b61d40ce685972245daa4785d04d61d952 Django-2.1.2-py3-none-any.whl
1be0feba9cb817f422a116f6b3bddbe1bd353ca7 Django-2.1.2.tar.gz
SHA256 checksums
================
acdcc1f61fdb0a0c82a1d3bf1879a414e7732ea894a7632af7f6d66ec7ab5bb3 Django-2.1.2-py3-none-any.whl
efbcad7ebb47daafbcead109b38a5bd519a3c3cd92c6ed0f691ff97fcdd16b45 Django-2.1.2.tar.gz
-----BEGIN PGP SIGNATURE-----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=NeEs
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,24 @@
-------------------------------------------------------------------
Thu Oct 4 13:13:00 UTC 2018 - Alberto Planas Dominguez <aplanas@suse.com>
- Update to version 2.1.2
* CVE-2018-16984: Password hash disclosure to “view only” admin
users
* Fixed a regression where nonexistent joins in F() no longer raised
FieldError (#29727).
* Fixed a regression where files starting with a tilde or underscore
werent ignored by the migrations loader (#29749).
* Made migrations detect changes to Meta.default_related_name
(#29755).
* Added compatibility for cx_Oracle 7 (#29759).
* Fixed a regression in Django 2.0 where unique index names werent
quoted (#29778).
* Fixed a regression where sliced queries with multiple columns with
the same name crashed on Oracle 12.1 (#29630).
* Fixed a crash when a user with the view (but not change)
permission made a POST request to an admin user change form
(#29809).
-------------------------------------------------------------------
Tue Sep 4 12:24:15 UTC 2018 - Ondřej Súkup <mimi.vx@gmail.com>

View File

@ -12,14 +12,14 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%define skip_python2 1
Name: python-Django
Version: 2.1.1
Version: 2.1.2
Release: 0
Summary: A high-level Python Web framework
License: BSD-3-Clause