From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pj1-f66.google.com (mail-pj1-f66.google.com [209.85.216.66]) by mail.openembedded.org (Postfix) with ESMTP id A698B75E2D for ; Tue, 3 Dec 2019 05:44:53 +0000 (UTC) Received: by mail-pj1-f66.google.com with SMTP id s8so1060671pji.2 for ; Mon, 02 Dec 2019 21:44:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=FoX7AdkHCcNSuIimd2h8G2S8aYUuPU+mqeJVDzp8e8c=; b=kB/FGYps5pLoc77vamtaY17bdyWRmLyzLNYV+yj9jc9BnTW9BPWzJ0dgY//MhmOngb kkH9OkSEY1UgEYEE8t7HmkZvolAT9hgie0SHLSqyQvsrlyZuQdP8/OSyHFMss+w4p0pU vCyS+X3SQ9s20rEDsbKlc+OFiPochXKSVacJFlhwEnUC0i5EZVSCcpgid1tSjkNAF3b0 ADvY5XCHv6Gb1TzDIFu/pQWMD0amrQNLnGXR5vTcmcD/CtDx4fOS2CeilFBnOAo8dtPy KeOSFVuG/wdGX6XIMJgAy5L1TjoOD5em2IaiQl14CCY9OrXbjKaBtUu5oibdnTfhXLO7 Iy2Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=FoX7AdkHCcNSuIimd2h8G2S8aYUuPU+mqeJVDzp8e8c=; b=PLl8MA5ZPAkled8R3MXlg5P/GVfPOTWRJqnzkrR5LiDrhTJ10Bsu0YRjwZDQKfqOgo YhaoArT+FGxjBJz8UMjlEsCZW7rp/6xNIzzZHs8z7V4IxM8bsvw3Y84WxuWZJWear06F vh++Bc4hmhO4tKyxMWUUkK/uQzFYOS1zhLbvQN+FWQhvYCYYRr9yX8tezqsc7fsekFzS IPv5IUg7TAdKIbPikjo3bVDqd1S87aTWoKQpVpjwbvlJ/a75AMgzimX9d3PHu61nvivY ER293MvfwBen7DIIL88P/PHyabFhPSICAn9MD2qBOhOHrhqjsjmaxr5XJ3hQkc85fLIk 0m8g== X-Gm-Message-State: APjAAAUxY5fTXlv9fnf35mKuAgoz07CFIzfterHsvKK/FnHX0R2QHHCQ Qdh8oWFovdMbp/5zkCRO82Lyo1X8km8= X-Google-Smtp-Source: APXvYqwLKwxP6Ip1uRt2xsSTUQCzf/Glm25UiXQDwsfpqwj4iZq2gjWHsOVxtKznFaKwCe7ZaCYZUw== X-Received: by 2002:a17:902:8c91:: with SMTP id t17mr3164782plo.225.1575351894311; Mon, 02 Dec 2019 21:44:54 -0800 (PST) Received: from thetis.hsd1.or.comcast.net ([2601:1c0:6080:4500:a470:42fc:1110:b615]) by smtp.gmail.com with ESMTPSA id d6sm1155069pju.8.2019.12.02.21.44.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 02 Dec 2019 21:44:51 -0800 (PST) From: Tim Orling To: openembedded-devel@lists.openembedded.org Date: Mon, 2 Dec 2019 21:44:18 -0800 Message-Id: <20191203054418.30137-1-ticotimo@gmail.com> X-Mailer: git-send-email 2.24.0 MIME-Version: 1.0 Subject: [meta-python2][PATCH] python-django: upgrade 1.11.14 => 1.11.26 X-BeenThere: openembedded-devel@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Using the OpenEmbedded metadata to build Distributions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Dec 2019 05:44:53 -0000 Content-Transfer-Encoding: 8bit See upstream release notes for details of bugfixes. Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.26/ Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.25/ Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.24/ Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.23/ CVE-2019-14232: Denial-of-service possibility in django.utils.text.Truncator CVE-2019-14233: Denial-of-service possibility in strip_tags() CVE-2019-14234: SQL injection possibility in key and index lookups for JSONField/HStoreField CVE-2019-14235: Potential memory exhaustion in django.utils.encoding.uri_to_iri() Bufixes: https://docs.djangoproject.com/en/3.0/releases/1.11.22/ CVE-2019-12781: Incorrect HTTP detection with reverse-proxy connecting via HTTPS Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.21/ CVE-2019-12308: AdminURLFieldWidget XSS Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.20/ Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.19/ CVE-2019-6975: Memory exhaustion in django.utils.numberformat.format() Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.18/ CVE-2019-3498: Content spoofing possibility in the default 404 page Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.17/ Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.16/ Bugfixes: https://docs.djangoproject.com/en/3.0/releases/1.11.15/ CVE-2018-14574: Open redirect possibility in CommonMiddleware Signed-off-by: Tim Orling --- .../{python-django_1.11.14.bb => python-django_1.11.26.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename recipes-devtools/python/{python-django_1.11.14.bb => python-django_1.11.26.bb} (87%) diff --git a/recipes-devtools/python/python-django_1.11.14.bb b/recipes-devtools/python/python-django_1.11.26.bb similarity index 87% rename from recipes-devtools/python/python-django_1.11.14.bb rename to recipes-devtools/python/python-django_1.11.26.bb index 3ecfdc57..8f1d6df9 100644 --- a/recipes-devtools/python/python-django_1.11.14.bb +++ b/recipes-devtools/python/python-django_1.11.26.bb @@ -6,8 +6,8 @@ HOMEPAGE = "http://www.djangoproject.com/" LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://LICENSE;md5=f09eb47206614a4954c51db8a94840fa" -SRC_URI[md5sum] = "38e82b59a1c27bbf98ccf0564ead7426" -SRC_URI[sha256sum] = "eb9271f0874f53106a2719c0c35ce67631f6cc27cf81a60c6f8c9817b35a3f6e" +SRC_URI[md5sum] = "858e5417a10ce565a15d6e4a2ea0ee37" +SRC_URI[sha256sum] = "861db7f82436ab43e1411832ed8dca81fc5fc0f7c2039c7e07a080a63092fb44" PYPI_PACKAGE = "Django" -- 2.24.0