From ac52a6d205d09e90571780b279415de4ba3f036216b73c91945e8d51b8c47f7b Mon Sep 17 00:00:00 2001 From: Stephan Kulow Date: Tue, 17 Jun 2014 09:23:06 +0000 Subject: [PATCH] Accepting request 237595 from devel:languages:python 1 OBS-URL: https://build.opensuse.org/request/show/237595 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Django?expand=0&rev=4 --- Django-1.6.2.tar.gz | 3 --- Django-1.6.5.tar.gz | 3 +++ python-Django.changes | 11 +++++++++++ python-Django.spec | 2 +- 4 files changed, 15 insertions(+), 4 deletions(-) delete mode 100644 Django-1.6.2.tar.gz create mode 100644 Django-1.6.5.tar.gz diff --git a/Django-1.6.2.tar.gz b/Django-1.6.2.tar.gz deleted file mode 100644 index 3a3f565..0000000 --- a/Django-1.6.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d1b3f8460e936f47846e7c4f80af951eda82a41c253c3a51ff3389863ff1c03a -size 6615116 diff --git a/Django-1.6.5.tar.gz b/Django-1.6.5.tar.gz new file mode 100644 index 0000000..cf1f453 --- /dev/null +++ b/Django-1.6.5.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:36940268c087fede32d3f5887cce9af9e5d27962a0c405aacafc2a3cc1f755c5 +size 6633768 diff --git a/python-Django.changes b/python-Django.changes index 50b21bf..00695d3 100644 --- a/python-Django.changes +++ b/python-Django.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Wed Jun 11 12:34:45 UTC 2014 - mcihar@suse.cz + +- Update to version 1.6.5, sercurity and important changes: + + Unexpected code execution using reverse() + + Caching of anonymous pages could reveal CSRF token + + MySQL typecasting + + select_for_update() requires a transaction + + Issue: Caches may incorrectly be allowed to store and serve private data + + Issue: Malformed redirect URLs from user input not correctly validated + ------------------------------------------------------------------- Fri Feb 14 09:32:07 UTC 2014 - speilicke@suse.com diff --git a/python-Django.spec b/python-Django.spec index 923c101..f7c0248 100644 --- a/python-Django.spec +++ b/python-Django.spec @@ -17,7 +17,7 @@ Name: python-Django -Version: 1.6.2 +Version: 1.6.5 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause