public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-django4.2] epel9: Update to version 4.3.30
@ 2026-06-06 17:22 Michel Lind
  0 siblings, 0 replies; only message in thread
From: Michel Lind @ 2026-06-06 17:22 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/python-django4.2
            Branch : epel9
            Commit : 3e472663f15720db891e205869310f3e688eb727
            Author : Michel Lind <salimma@fedoraproject.org>
            Date   : 2026-06-06T18:19:30+01:00
            Stats  : +3/-2 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-django4.2/c/3e472663f15720db891e205869310f3e688eb727?branch=epel9

            Log:
            Update to version 4.3.30

- Django 4.2.30 fixes one security issue with severity “moderate” and four security issues with severity “low” in 4.2.29
- CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload [moderate]
- CVE-2026-3902: ASGI header spoofing via underscore/hyphen conflation
- CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
- CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
- CVE-2026-33034: Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass
- Django 4.2.29 fixes a security issue with severity “moderate” and a security issue with severity “low” in 4.2.28
- CVE-2026-25673: Potential denial-of-service vulnerability in URLField
  via Unicode normalization on Windows [moderate]
- CVE-2026-25674: Potential incorrect permissions on newly created file system objects

Signed-off-by: Michel Lind <salimma@fedoraproject.org>

---
diff --git a/.gitignore b/.gitignore
index baa8e40..62e0735 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@
 /django-4.2.23.tar.gz
 /django-4.2.27.tar.gz
 /django-4.2.28.tar.gz
+/django-4.2.30.tar.gz

diff --git a/python-django4.2.spec b/python-django4.2.spec
index a5a156a..e7bfad8 100644
--- a/python-django4.2.spec
+++ b/python-django4.2.spec
@@ -9,7 +9,7 @@
 %endif
 
 Name:           python-django4.2
-Version:        4.2.28
+Version:        4.2.30
 Release:        %autorelease
 Summary:        A high-level Python Web framework
 

diff --git a/sources b/sources
index f30b02f..be2b962 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (django-4.2.28.tar.gz) = 7d7e33d8bb08aed5d6f500058989b70cb0a4a7e81bf0c49e2da8f627885d0f7d408c40fed521ba500fef871091eecf80ebac662672573128a06006f77f7cfd1d
+SHA512 (django-4.2.30.tar.gz) = 62bbb451a3ab61ab1679ce9e86178147930cc711f01a0d983aa231ffbc4152f1926d3da240751ee4636f1c0c421248d2f3ee5ebd6827c45a4743adae7b46fbe8

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-06-06 17:22 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-06-06 17:22 [rpms/python-django4.2] epel9: Update to version 4.3.30 Michel Lind

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox