From c93b729a7dd6a9cac98dcdf33796e1f02a7364f73ed92719fea41ac5ca4c902a Mon Sep 17 00:00:00 2001 From: Alberto Planas Dominguez Date: Fri, 5 Jan 2024 17:21:59 +0000 Subject: [PATCH] Accepting request 1137053 from home:alarrosa:branches:devel:languages:python:django Add bugzilla reference + CVE-2023-31047: Potential bypass of validation when uploading multiple files using one form field (bsc#1210866) OBS-URL: https://build.opensuse.org/request/show/1137053 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=156 --- python-Django.changes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/python-Django.changes b/python-Django.changes index 7ecb02d..e839635 100644 --- a/python-Django.changes +++ b/python-Django.changes @@ -162,7 +162,8 @@ Tue Jun 6 06:35:28 UTC 2023 - Alberto Planas Dominguez Thu May 4 07:02:58 UTC 2023 - Alberto Planas Dominguez - Update to 4.2.1 - + CVE-2023-31047: Potential bypass of validation when uploading multiple files using one form field + + CVE-2023-31047: Potential bypass of validation when uploading + multiple files using one form field (bsc#1210866) + Bugfixes * Fixed a regression in Django 4.2 that caused a crash of QuerySet.defer() when deferring fields by attribute names