From f0812a84c9cc84aadde1778d1bdc31c6f69c8357 Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Wed, 2 Jun 2021 16:36:02 +0300 Subject: python3-django: Upgrade 3.2.3 -> 3.2.4 Upgrade to release 3.2.4: - CVE-2021-33203: Potential directory traversal via admindocs - CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses - Fixed a bug in Django 3.2 where a final catch-all view in the admin didn't respect the server-provided value of SCRIPT_NAME when redirecting unauthenticated users to the login page. - Fixed a bug in Django 3.2 where a system check would crash on an abstract model - Prevented unnecessary initialization of unused caches following a regression in Django 3.2 - Fixed a crash in Django 3.2 that could occur when running mod_wsgi with the recommended settings while the Windows colorama library was installed - Fixed a bug in Django 3.2 that would trigger the auto-reloader for template changes when directory paths were specified with strings - Fixed a regression in Django 3.2 that caused a crash of auto-reloader with AttributeError, e.g. inside a Conda environment - Fixed a regression in Django 3.2 that caused a loss of precision for operations with DecimalField on MySQL Signed-off-by: Leon Anavi Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin (cherry picked from commit 624e3e18982775d2ea88e55e16d179420f0575fc) Signed-off-by: Armin Kuster --- meta-python/recipes-devtools/python/python3-django_3.2.3.bb | 13 ------------- meta-python/recipes-devtools/python/python3-django_3.2.4.bb | 13 +++++++++++++ 2 files changed, 13 insertions(+), 13 deletions(-) delete mode 100644 meta-python/recipes-devtools/python/python3-django_3.2.3.bb create mode 100644 meta-python/recipes-devtools/python/python3-django_3.2.4.bb diff --git a/meta-python/recipes-devtools/python/python3-django_3.2.3.bb b/meta-python/recipes-devtools/python/python3-django_3.2.3.bb deleted file mode 100644 index 7a9611ca12..0000000000 --- a/meta-python/recipes-devtools/python/python3-django_3.2.3.bb +++ /dev/null @@ -1,13 +0,0 @@ -require python-django.inc -inherit setuptools3 - -SRC_URI[sha256sum] = "13ac78dbfd189532cad8f383a27e58e18b3d33f80009ceb476d7fcbfc5dcebd8" - -RDEPENDS_${PN} += "\ - ${PYTHON_PN}-sqlparse \ -" - -# Set DEFAULT_PREFERENCE so that the LTS version of django is built by -# default. To build the 3.x branch, -# PREFERRED_VERSION_python3-django = "3.2.2" can be added to local.conf -DEFAULT_PREFERENCE = "-1" diff --git a/meta-python/recipes-devtools/python/python3-django_3.2.4.bb b/meta-python/recipes-devtools/python/python3-django_3.2.4.bb new file mode 100644 index 0000000000..52504885e5 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-django_3.2.4.bb @@ -0,0 +1,13 @@ +require python-django.inc +inherit setuptools3 + +SRC_URI[sha256sum] = "66c9d8db8cc6fe938a28b7887c1596e42d522e27618562517cc8929eb7e7f296" + +RDEPENDS_${PN} += "\ + ${PYTHON_PN}-sqlparse \ +" + +# Set DEFAULT_PREFERENCE so that the LTS version of django is built by +# default. To build the 3.x branch, +# PREFERRED_VERSION_python3-django = "3.2.2" can be added to local.conf +DEFAULT_PREFERENCE = "-1" -- cgit v1.2.3-54-g00ecf