rpm/python-Django
SHA256
1
0
Fork 0
forked from pool/python-Django
Code Pull Requests Activity

Accepting request 890932 from home:aplanas:branches:devel:languages:python:django

Browse Source 
- Update to 3.2.2 (CVE-2021-32052)

OBS-URL: https://build.opensuse.org/request/show/890932
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=82
This commit is contained in:
Alberto Planas
2021-05-07 08:11:13 +00:00
committed by Git OBS Bridge
parent bc6d5ae53b
commit 8622f84af6
6 changed files with 81 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
python-Django.changes
View File

@@ -1,3 +1,13 @@
-------------------------------------------------------------------
Thu May 6 08:54:41 UTC 2021 - Alberto Planas Dominguez <aplanas@suse.com>
- Update to 3.2.2 (CVE-2021-32052)
+ CVE-2021-32052: Header injection possibility since URLValidator
accepted newlines in input on Python 3.9.5+
+ Prevented, following a regression in Django 3.2.1, makemigrations
from generating infinite migrations for a model with Meta.ordering
contained OrderBy expressions
-------------------------------------------------------------------
Wed May 5 17:25:18 UTC 2021 - Ben Greiner <code@bnavigator.de>