public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-django5] f44: Update to version 5.2.17; Resolves: rhbz#2511083
@ 2026-09-09 10:59 Michel Lind
  0 siblings, 0 replies; only message in thread
From: Michel Lind @ 2026-09-09 10:59 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/python-django5
            Branch : f44
            Commit : 969737a62647651a685d2f408d5734f225718bd3
            Author : Michel Lind <salimma@fedoraproject.org>
            Date   : 2026-09-09T10:41:20+01:00
            Stats  : +6/-5 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-django5/c/969737a62647651a685d2f408d5734f225718bd3?branch=f44

            Log:
            Update to version 5.2.17; Resolves: rhbz#2511083

- Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups
- Fixes CVE-2026-15337 [low]: Potential denial-of-service vulnerability in check_for_language()
- Fixes CVE-2026-15830 [moderate]: Potential denial-of-service vulnerability via nested geometry collections
- Fixes CVE-2026-15920 [moderate]: Potential cross-site scripting via URLField values in the admin

Signed-off-by: Michel Lind <salimma@fedoraproject.org>

---
diff --git a/.gitignore b/.gitignore
index d8b573d..e5d7077 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
 /django-5.2.14.tar.gz
 /django-5.2.15.tar.gz
 /django-5.2.16.tar.gz
+/django-5.2.17.tar.gz

diff --git a/python-django5.spec b/python-django5.spec
index 3fc3f0b..f5d525e 100644
--- a/python-django5.spec
+++ b/python-django5.spec
@@ -23,7 +23,7 @@
 %bcond old_setuptools 0
 %endif
 
-Version:        5.2.16
+Version:        5.2.17
 %global major_ver %(echo %{version} | cut -d. -f1)
 Name:           python-django%{major_ver}
 
@@ -101,9 +101,9 @@ BuildRequires:  python3-devel
 BuildRequires:  python3-asgiref
 
 # see django/contrib/admin/static/admin/js/vendor/
-Provides:       bundled(jquery) = 3.6.4
+Provides:       bundled(jquery) = 3.7.1
 Provides:       bundled(select2) = 4.0.13
-Provides:       bundled(xregexp) = 3.2.0
+Provides:       bundled(xregexp) = 5.1.1
 
 # Make sure this replaces any other Django package
 Provides:       python-django-impl
@@ -113,7 +113,7 @@ Conflicts:      python-django-impl
 
 %prep
 %autosetup -N -n django-%{version}
-%autopatch -p1 -M 999
+#autopatch -p1 -M 999
 %if %{with old_setuptools}
 %autopatch -p1 1001
 %endif

diff --git a/sources b/sources
index 997ba4b..fd77405 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (django-5.2.16.tar.gz) = 7925e20a35f261c05db6666522420e1f0fbc34a6097ecd4b80e82a4b05e1e5cf0e595355c93a2c15e7d7dbe469fbef152518b747b9389807c99b73886dd00a5f
+SHA512 (django-5.2.17.tar.gz) = 3f960e8227ab71d42f33700e689db6f359411d43efd3b138c59e66aac245a110f33458dcc9e7b27ddbda16b2a1c97e1e56ce00c9ace8294216eded8a4af8815f

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-09-09 10:59 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-09 10:59 [rpms/python-django5] f44: Update to version 5.2.17; Resolves: rhbz#2511083 Michel Lind

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox