Fri Nov 18 06:00:20 2022 UTC ()
py-django3: updated to 3.2.16

Django 3.2.16 fixes a security issue with severity ���medium��� in 3.2.15.

CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs

Internationalized URLs were subject to potential denial of service attack via the locale parameter.


(adam)
diff -r1.29 -r1.30 pkgsrc/www/py-django3/Makefile
diff -r1.28 -r1.29 pkgsrc/www/py-django3/distinfo
cvs diff -r1.29 -r1.30 pkgsrc/www/py-django3/Makefile (expand / switch to unified diff)

--- pkgsrc/www/py-django3/Makefile 2022/09/14 10:00:40 1.29
+++ pkgsrc/www/py-django3/Makefile 2022/11/18 06:00:20 1.30
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.29 2022/09/14 10:00:40 adam Exp $ 1# $NetBSD: Makefile,v 1.30 2022/11/18 06:00:20 adam Exp $
2 2
3DISTNAME= Django-3.2.15 3DISTNAME= Django-3.2.16
4PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl} 4PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl}
5CATEGORIES= www python 5CATEGORIES= www python
6MASTER_SITES= https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/ 6MASTER_SITES= https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
7MASTER_SITES+= ${MASTER_SITE_PYPI:=D/Django/} 7MASTER_SITES+= ${MASTER_SITE_PYPI:=D/Django/}
8 8
9MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= https://www.djangoproject.com/ 10HOMEPAGE= https://www.djangoproject.com/
11COMMENT= Django, a high-level Python Web framework 11COMMENT= Django, a high-level Python Web framework
12LICENSE= modified-bsd 12LICENSE= modified-bsd
13 13
14DEPENDS+= ${PYPKGPREFIX}-asgiref>=3.3.2:../../www/py-asgiref 14DEPENDS+= ${PYPKGPREFIX}-asgiref>=3.3.2:../../www/py-asgiref
15DEPENDS+= ${PYPKGPREFIX}-pytz-[0-9]*:../../time/py-pytz 15DEPENDS+= ${PYPKGPREFIX}-pytz-[0-9]*:../../time/py-pytz
16DEPENDS+= ${PYPKGPREFIX}-sqlparse>=0.2.2:../../databases/py-sqlparse 16DEPENDS+= ${PYPKGPREFIX}-sqlparse>=0.2.2:../../databases/py-sqlparse
cvs diff -r1.28 -r1.29 pkgsrc/www/py-django3/distinfo (expand / switch to unified diff)

--- pkgsrc/www/py-django3/distinfo 2022/09/14 10:00:40 1.28
+++ pkgsrc/www/py-django3/distinfo 2022/11/18 06:00:20 1.29
@@ -1,5 +1,5 @@ @@ -1,5 +1,5 @@
1$NetBSD: distinfo,v 1.28 2022/09/14 10:00:40 adam Exp $ 1$NetBSD: distinfo,v 1.29 2022/11/18 06:00:20 adam Exp $
2 2
3BLAKE2s (Django-3.2.15.tar.gz) = 5483fa2df47bc46f815334c8bd669047f2e4f7973893520c468494c17693ae12 3BLAKE2s (Django-3.2.16.tar.gz) = 32b7e8638cb5f1c1fcd1ab39c12f2172aaf393c368875533a0c8255f0fbf0b81
4SHA512 (Django-3.2.15.tar.gz) = fccdad52d39c8757972d5e987b94b13d8ce5ce08ad480ef79407b0d9b88cff69336770409cbe18ce9529bf10966ad63105a0b0f1ffe39b681a41be3718ec886b 4SHA512 (Django-3.2.16.tar.gz) = 628263370b4d073d5e88db8607f5b082b03c4e6e6ed6aca059dce18f61725eb4ff69da77f5f98ff7b3e6d9046a701aca5a32687670bf7ea5fdcf92d6d13d7373
5Size (Django-3.2.15.tar.gz) = 9833828 bytes 5Size (Django-3.2.16.tar.gz) = 9847052 bytes