manuel.diener
f8e89786f9
Fixes the following security issues: - CVE-2025-13473 (low): Username enumeration through timing difference in mod_wsgi authentication handler - CVE-2025-14550 (moderate): Potential denial-of-service vulnerability via repeated headers when using ASGI - CVE-2026-1207 (high): Potential SQL injection via raster lookups on PostGIS - CVE-2026-1285 (moderate): Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods - CVE-2026-1287 (high): Potential SQL injection in column aliases via control characters - CVE-2026-1312 (high): Potential SQL injection via QuerySet.order_by and FilteredRelation See the release notes here: https://docs.djangoproject.com/en/dev/releases/6.0.2/ Also includes the bugfixes from version 6.0.1: https://docs.djangoproject.com/en/dev/releases/6.0.1/ Signed-off-by: Manuel Diener <manuel.diener@othermo.de> Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu> Signed-off-by: Julien Olivain <ju.o@free.fr>
27 lines
1.1 KiB
Makefile
27 lines
1.1 KiB
Makefile
################################################################################
|
|
#
|
|
# python-django
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_DJANGO_VERSION = 6.0.2
|
|
PYTHON_DJANGO_SOURCE = django-$(PYTHON_DJANGO_VERSION).tar.gz
|
|
PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/26/3e/a1c4207c5dea4697b7a3387e26584919ba987d8f9320f59dc0b5c557a4eb
|
|
PYTHON_DJANGO_LICENSE = BSD-3-Clause, MIT (jquery, utils/archive.py), BSD-2-Clause (inlines.js), CC-BY-4.0 (admin svg files)
|
|
PYTHON_DJANGO_LICENSE_FILES = LICENSE \
|
|
django/contrib/gis/measure.py \
|
|
django/contrib/gis/gdal/LICENSE \
|
|
django/contrib/gis/geos/LICENSE \
|
|
django/contrib/admin/static/admin/js/inlines.js \
|
|
django/contrib/admin/static/admin/js/vendor/jquery/LICENSE.txt \
|
|
django/contrib/admin/static/admin/js/vendor/select2/LICENSE.md \
|
|
django/contrib/admin/static/admin/js/vendor/xregexp/LICENSE.txt \
|
|
django/contrib/admin/static/admin/img/README.md \
|
|
django/dispatch/license.txt \
|
|
django/utils/archive.py
|
|
PYTHON_DJANGO_CPE_ID_VENDOR = djangoproject
|
|
PYTHON_DJANGO_CPE_ID_PRODUCT = django
|
|
PYTHON_DJANGO_SETUP_TYPE = setuptools
|
|
|
|
$(eval $(python-package))
|