Received: by mail.netbsd.org (Postfix, from userid 605) id B0C7584D63; Tue, 6 Aug 2019 09:33:01 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 33F8284D61 for ; Tue, 6 Aug 2019 09:33:01 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id jN7BBeTCLE3V for ; Tue, 6 Aug 2019 09:33:00 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 989BB84D5D for ; Tue, 6 Aug 2019 09:33:00 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 8B60EFBF4; Tue, 6 Aug 2019 09:33:00 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_156508398035020" MIME-Version: 1.0 Date: Tue, 6 Aug 2019 09:33:00 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/www/py-django2 To: pkgsrc-changes@NetBSD.org Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20190806093300.8B60EFBF4@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_156508398035020 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Tue Aug 6 09:33:00 UTC 2019 Modified Files: pkgsrc/www/py-django2: Makefile distinfo Log Message: py-django2: updated to 2.2.4 Django 2.2.4: * CVE-2019-14232: Denial-of-service possibility in django.utils.text.Truncator * CVE-2019-14233: Denial-of-service possibility in strip_tags() * CVE-2019-14234: SQL injection possibility in key and index lookups for JSONField/HStoreField * CVE-2019-14235: Potential memory exhaustion in django.utils.encoding.uri_to_iri() * Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used * Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type * Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00') * Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/py-django2/Makefile cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/py-django2/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_156508398035020 Content-Disposition: inline Content-Length: 1662 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/py-django2/Makefile diff -u pkgsrc/www/py-django2/Makefile:1.18 pkgsrc/www/py-django2/Makefile:1.19 --- pkgsrc/www/py-django2/Makefile:1.18 Mon Jul 1 18:26:22 2019 +++ pkgsrc/www/py-django2/Makefile Tue Aug 6 09:33:00 2019 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.18 2019/07/01 18:26:22 adam Exp $ +# $NetBSD: Makefile,v 1.19 2019/08/06 09:33:00 adam Exp $ -DISTNAME= Django-2.2.3 +DISTNAME= Django-2.2.4 PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl} CATEGORIES= www python MASTER_SITES= https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/ Index: pkgsrc/www/py-django2/distinfo diff -u pkgsrc/www/py-django2/distinfo:1.16 pkgsrc/www/py-django2/distinfo:1.17 --- pkgsrc/www/py-django2/distinfo:1.16 Mon Jul 1 18:26:22 2019 +++ pkgsrc/www/py-django2/distinfo Tue Aug 6 09:33:00 2019 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.16 2019/07/01 18:26:22 adam Exp $ +$NetBSD: distinfo,v 1.17 2019/08/06 09:33:00 adam Exp $ -SHA1 (Django-2.2.3.tar.gz) = 1d4eca8884b601e8e7dc06705b9644fb579c57f9 -RMD160 (Django-2.2.3.tar.gz) = 8a1085468ba7bf73d9a5cf67398e03f96f06f3dc -SHA512 (Django-2.2.3.tar.gz) = 2ce65adcc6cacf6c011c7cb075660026d8c68ca4d5a96ecf63f1986f1f2115bfa42faab9b6a62f1820bc2612a2438ee505cd5be46ad5c879d3923f31987b2bac -Size (Django-2.2.3.tar.gz) = 8992109 bytes +SHA1 (Django-2.2.4.tar.gz) = 42640e8381bbf041bb2e09400251cd53694902a8 +RMD160 (Django-2.2.4.tar.gz) = 78cbb76a86247ad2902f52772aaab11aeb974059 +SHA512 (Django-2.2.4.tar.gz) = 72b7def60a69d65a23f98fa94528aa10f889c5e485d09441a594e46cd805a10f2e7dc786f302ef15ce8afba6165075df479febd2c8c6a34adb95311907212f3a +Size (Django-2.2.4.tar.gz) = 8856979 bytes --_----------=_156508398035020--