diff --git a/Django-1.6.2.tar.gz b/Django-1.6.2.tar.gz deleted file mode 100644 index 3a3f565..0000000 --- a/Django-1.6.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d1b3f8460e936f47846e7c4f80af951eda82a41c253c3a51ff3389863ff1c03a -size 6615116 diff --git a/Django-1.6.5.tar.gz b/Django-1.6.5.tar.gz new file mode 100644 index 0000000..cf1f453 --- /dev/null +++ b/Django-1.6.5.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:36940268c087fede32d3f5887cce9af9e5d27962a0c405aacafc2a3cc1f755c5 +size 6633768 diff --git a/python-Django.changes b/python-Django.changes index 50b21bf..00695d3 100644 --- a/python-Django.changes +++ b/python-Django.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Wed Jun 11 12:34:45 UTC 2014 - mcihar@suse.cz + +- Update to version 1.6.5, sercurity and important changes: + + Unexpected code execution using reverse() + + Caching of anonymous pages could reveal CSRF token + + MySQL typecasting + + select_for_update() requires a transaction + + Issue: Caches may incorrectly be allowed to store and serve private data + + Issue: Malformed redirect URLs from user input not correctly validated + ------------------------------------------------------------------- Fri Feb 14 09:32:07 UTC 2014 - speilicke@suse.com diff --git a/python-Django.spec b/python-Django.spec index 923c101..f7c0248 100644 --- a/python-Django.spec +++ b/python-Django.spec @@ -17,7 +17,7 @@ Name: python-Django -Version: 1.6.2 +Version: 1.6.5 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause