[Buildroot] [PATCH] package/python-django: security bump to version 2.1.7

[Thomas Petazzoni <thomas.petazzoni@bootlin.com>]

On Fri, 15 Feb 2019 14:32:01 +0100
Peter Korsgaard <peter@korsgaard.com> wrote:

> Fixes the following security issues:
> 
> CVE-2019-6975: Memory exhaustion in django.utils.numberformat.format()
> 
> If django.utils.numberformat.format() ? used by contrib.admin as well as the
> the floatformat, filesizeformat, and intcomma templates filters ? received a
> Decimal with a large number of digits or a large exponent, it could lead to
> significant memory usage due to a call to '{:f}'.format().
> 
> To avoid this, decimals with more than 200 digits are now formatted using
> scientific notation.
> 
> https://docs.djangoproject.com/en/2.1/releases/2.1.6/
> 
> 2.1.6 contained a packaging error, fixed by 2.1.7:
> 
> https://docs.djangoproject.com/en/2.1/releases/2.1.7/
> 
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> ---
>  package/python-django/python-django.hash | 4 ++--
>  package/python-django/python-django.mk   | 4 ++--
>  2 files changed, 4 insertions(+), 4 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com