public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-django5] f44: Update to version 5.2.15; Resolves RHBZ#2484354
@ 2026-06-05 18:39 Michel Lind
0 siblings, 0 replies; only message in thread
From: Michel Lind @ 2026-06-05 18:39 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/python-django5
Branch : f44
Commit : 3f72f2393329cee0a433cf01978fe48563b09c8c
Author : Michel Lind <salimma@fedoraproject.org>
Date : 2026-06-05T19:00:15+01:00
Stats : +3/-2 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/python-django5/c/3f72f2393329cee0a433cf01978fe48563b09c8c?branch=f44
Log:
Update to version 5.2.15; Resolves RHBZ#2484354
- Fixes five low-severity CVEs
- CVE-2026-6873: Signed cookie salt namespace collision
- CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend
- CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives
- CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization
- CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header
Signed-off-by: Michel Lind <salimma@fedoraproject.org>
---
diff --git a/.gitignore b/.gitignore
index b16435f..fca289b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@
/django-5.2.9.tar.gz
/django-5.2.11.tar.gz
/django-5.2.14.tar.gz
+/django-5.2.15.tar.gz
diff --git a/python-django5.spec b/python-django5.spec
index abb69e6..83d806b 100644
--- a/python-django5.spec
+++ b/python-django5.spec
@@ -20,7 +20,7 @@
%bcond old_setuptools 0
%endif
-Version: 5.2.14
+Version: 5.2.15
%global major_ver %(echo %{version} | cut -d. -f1)
Name: python-django%{major_ver}
diff --git a/sources b/sources
index 52b0a15..b088a98 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (django-5.2.14.tar.gz) = e6e05195d4693209de15be99fc6621cc23b5a0d28fbcf2516b271274aa1637be4f55a6b607fb1c5dc8e913a78eca99d76645bce1cc71468a8dfed7e16c129a84
+SHA512 (django-5.2.15.tar.gz) = ac222ce040bd55dc580bfbc38d5c35802960fcd90070271f2f990f3a2f8c429c837b511fce1c45ef2d21ad518fdd47c26a6486a8f4696f3f2e9ee9e114421a3c
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-06-05 18:39 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-06-05 18:39 [rpms/python-django5] f44: Update to version 5.2.15; Resolves RHBZ#2484354 Michel Lind
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox