public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-django4.2] epel9: Update to version 4.3.30
@ 2026-06-06 17:22 Michel Lind
0 siblings, 0 replies; only message in thread
From: Michel Lind @ 2026-06-06 17:22 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/python-django4.2
Branch : epel9
Commit : 3e472663f15720db891e205869310f3e688eb727
Author : Michel Lind <salimma@fedoraproject.org>
Date : 2026-06-06T18:19:30+01:00
Stats : +3/-2 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/python-django4.2/c/3e472663f15720db891e205869310f3e688eb727?branch=epel9
Log:
Update to version 4.3.30
- Django 4.2.30 fixes one security issue with severity “moderate” and four security issues with severity “low” in 4.2.29
- CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload [moderate]
- CVE-2026-3902: ASGI header spoofing via underscore/hyphen conflation
- CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
- CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
- CVE-2026-33034: Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass
- Django 4.2.29 fixes a security issue with severity “moderate” and a security issue with severity “low” in 4.2.28
- CVE-2026-25673: Potential denial-of-service vulnerability in URLField
via Unicode normalization on Windows [moderate]
- CVE-2026-25674: Potential incorrect permissions on newly created file system objects
Signed-off-by: Michel Lind <salimma@fedoraproject.org>
---
diff --git a/.gitignore b/.gitignore
index baa8e40..62e0735 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@
/django-4.2.23.tar.gz
/django-4.2.27.tar.gz
/django-4.2.28.tar.gz
+/django-4.2.30.tar.gz
diff --git a/python-django4.2.spec b/python-django4.2.spec
index a5a156a..e7bfad8 100644
--- a/python-django4.2.spec
+++ b/python-django4.2.spec
@@ -9,7 +9,7 @@
%endif
Name: python-django4.2
-Version: 4.2.28
+Version: 4.2.30
Release: %autorelease
Summary: A high-level Python Web framework
diff --git a/sources b/sources
index f30b02f..be2b962 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (django-4.2.28.tar.gz) = 7d7e33d8bb08aed5d6f500058989b70cb0a4a7e81bf0c49e2da8f627885d0f7d408c40fed521ba500fef871091eecf80ebac662672573128a06006f77f7cfd1d
+SHA512 (django-4.2.30.tar.gz) = 62bbb451a3ab61ab1679ce9e86178147930cc711f01a0d983aa231ffbc4152f1926d3da240751ee4636f1c0c421248d2f3ee5ebd6827c45a4743adae7b46fbe8
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-06-06 17:22 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-06-06 17:22 [rpms/python-django4.2] epel9: Update to version 4.3.30 Michel Lind
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox