Compare commits

9 Commits

Author SHA256 Message Date
2f8a63dcf8 Accepting request 1198655 from devel:languages:python:django
OBS-URL: https://build.opensuse.org/request/show/1198655
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Django4?expand=0&rev=4
2024-09-04 11:27:30 +00:00
a4b4168d0d Accepting request 1192592 from devel:languages:python:django
- Update to 4.2.15 (bsc#1228629, bsc#1228630, bsc#1228631, bsc#1228632)

OBS-URL: https://build.opensuse.org/request/show/1192592
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Django4?expand=0&rev=3
2024-08-09 14:15:06 +00:00
a8117dacb3 add bugzilla entries for the CVEs
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django4?expand=0&rev=7
2024-08-08 10:36:36 +00:00
5de29dc3a3 Accepting request 1192059 from devel:languages:python:django
OBS-URL: https://build.opensuse.org/request/show/1192059
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Django4?expand=0&rev=2
2024-08-08 08:57:34 +00:00
7d8d017df2 - Update to 4.2.15
* CVE-2024-41989: Memory exhaustion in
    django.utils.numberformat.floatformat()
  * CVE-2024-41990: Potential denial-of-service vulnerability in
    django.utils.html.urlize()
  * CVE-2024-41991: Potential denial-of-service vulnerability in
    django.utils.html.urlize() and AdminURLFieldWidget
  * CVE-2024-42005: Potential SQL injection in QuerySet.values() and
    values_list()
  * Fixed a regression in Django 4.2.14 that caused a crash in
    LocaleMiddleware when processing a language code over 500
    characters

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django4?expand=0&rev=5
2024-08-07 06:25:00 +00:00
4ad33dfe4e Accepting request 1188323 from devel:languages:python:django
backport of older Django

OBS-URL: https://build.opensuse.org/request/show/1188323
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Django4?expand=0&rev=1
2024-07-19 13:28:57 +00:00
95863643bc add conflicts
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django4?expand=0&rev=3
2024-07-18 06:52:36 +00:00
b3901740cf - Update to 4.2.14
* Django 4.2.14 fixes two security issues with severity “moderate” 
    and two security issues with severity “low" in 4.2.13
  * CVE-2024-38875: Potential denial-of-service vulnerability in 
    django.utils.html.urlize() (bsc#1227590)
  * CVE-2024-39329: Username enumeration through timing difference 
    for users with unusable passwords (bsc#1227593)
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
    (bsc#1227594)
  * CVE-2024-39614: Potential denial-of-service vulnerability in 
    get_supported_language_variant() (bsc#1227595)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django4?expand=0&rev=2
2024-07-17 14:44:09 +00:00
9ff65d6710 Django 4.x for HyperKitty
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django4?expand=0&rev=1
2024-07-17 14:26:39 +00:00
4 changed files with 0 additions and 138 deletions

View File

@ -1,67 +0,0 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
This file contains MD5, SHA1, and SHA256 checksums for the source-code
tarball and wheel files of Django 4.2.14, released July 9, 2024.
To use this file, you will need a working install of PGP or other
compatible public-key encryption software. You will also need to have
the Django release manager's public key in your keyring. This key has
the ID ``2EE82A8D9470983E`` and can be imported from the MIT
keyserver, for example, if using the open-source GNU Privacy Guard
implementation of PGP:
gpg --keyserver pgp.mit.edu --recv-key 2EE82A8D9470983E
or via the GitHub API:
curl https://github.com/nessita.gpg | gpg --import -
Once the key is imported, verify this file:
gpg --verify Django-4.2.14.checksum.txt
Once you have verified this file, you can use normal MD5, SHA1, or SHA256
checksumming applications to generate the checksums of the Django
package and compare them to the checksums listed below.
Release packages
================
https://www.djangoproject.com/m/releases/4.2/Django-4.2.14.tar.gz
https://www.djangoproject.com/m/releases/4.2/Django-4.2.14-py3-none-any.whl
MD5 checksums
=============
34e53943311a2603dd54c46f284136db Django-4.2.14.tar.gz
bf26e4c5c12ca94b7cc1b68b8792a94a Django-4.2.14-py3-none-any.whl
SHA1 checksums
==============
62b423064e3b75f038bd19729f3252135d399a8e Django-4.2.14.tar.gz
cdb5832c1d8e3368eaafeef6f5d0f1669ff53c45 Django-4.2.14-py3-none-any.whl
SHA256 checksums
================
fc6919875a6226c7ffcae1a7d51e0f2ceaf6f160393180818f6c95f51b1e7b96 Django-4.2.14.tar.gz
3ec32bc2c616ab02834b9cac93143a7dc1cdcd5b822d78ac95fc20a38c534240 Django-4.2.14-py3-none-any.whl
-----BEGIN PGP SIGNATURE-----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=5Gpw
-----END PGP SIGNATURE-----

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:fc6919875a6226c7ffcae1a7d51e0f2ceaf6f160393180818f6c95f51b1e7b96
size 10432993

View File

@ -1,65 +0,0 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
This file contains MD5, SHA1, and SHA256 checksums for the source-code
tarball and wheel files of Django 4.2.15, released August 6, 2024.
To use this file, you will need a working install of PGP or other
compatible public-key encryption software. You will also need to have
the Django release manager's public key in your keyring. This key has
the ID ``3955B19851EA96EF`` and can be imported from the MIT
keyserver, for example, if using the open-source GNU Privacy Guard
implementation of PGP:
gpg --keyserver pgp.mit.edu --recv-key 3955B19851EA96EF
or via the GitHub API:
curl https://github.com/sarahboyce.gpg | gpg --import -
Once the key is imported, verify this file:
gpg --verify Django-4.2.15.checksum.txt
Once you have verified this file, you can use normal MD5, SHA1, or SHA256
checksumming applications to generate the checksums of the Django
package and compare them to the checksums listed below.
Release packages
================
https://www.djangoproject.com/m/releases/4.2/Django-4.2.15.tar.gz
https://www.djangoproject.com/m/releases/4.2/Django-4.2.15-py3-none-any.whl
MD5 checksums
=============
a828465eb577e2b4c9a34b9839b33bef Django-4.2.15.tar.gz
6c82f64cc4ef7409f2a7e835afe274f0 Django-4.2.15-py3-none-any.whl
SHA1 checksums
==============
82d4afdf4c3210cf399eaebe287d4012a49444ff Django-4.2.15.tar.gz
44109d399ec33f89699a211d0fe9493a1b2a2bad Django-4.2.15-py3-none-any.whl
SHA256 checksums
================
c77f926b81129493961e19c0e02188f8d07c112a1162df69bfab178ae447f94a Django-4.2.15.tar.gz
61ee4a130efb8c451ef3467c67ca99fdce400fedd768634efc86a68c18d80d30 Django-4.2.15-py3-none-any.whl
-----BEGIN PGP SIGNATURE-----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=oBEc
-----END PGP SIGNATURE-----

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:c77f926b81129493961e19c0e02188f8d07c112a1162df69bfab178ae447f94a
size 10418066