public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-django5] f44: Update to version 5.2.17; Resolves: rhbz#2511083
@ 2026-09-09 10:59 Michel Lind
0 siblings, 0 replies; only message in thread
From: Michel Lind @ 2026-09-09 10:59 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/python-django5
Branch : f44
Commit : 969737a62647651a685d2f408d5734f225718bd3
Author : Michel Lind <salimma@fedoraproject.org>
Date : 2026-09-09T10:41:20+01:00
Stats : +6/-5 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/python-django5/c/969737a62647651a685d2f408d5734f225718bd3?branch=f44
Log:
Update to version 5.2.17; Resolves: rhbz#2511083
- Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups
- Fixes CVE-2026-15337 [low]: Potential denial-of-service vulnerability in check_for_language()
- Fixes CVE-2026-15830 [moderate]: Potential denial-of-service vulnerability via nested geometry collections
- Fixes CVE-2026-15920 [moderate]: Potential cross-site scripting via URLField values in the admin
Signed-off-by: Michel Lind <salimma@fedoraproject.org>
---
diff --git a/.gitignore b/.gitignore
index d8b573d..e5d7077 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
/django-5.2.14.tar.gz
/django-5.2.15.tar.gz
/django-5.2.16.tar.gz
+/django-5.2.17.tar.gz
diff --git a/python-django5.spec b/python-django5.spec
index 3fc3f0b..f5d525e 100644
--- a/python-django5.spec
+++ b/python-django5.spec
@@ -23,7 +23,7 @@
%bcond old_setuptools 0
%endif
-Version: 5.2.16
+Version: 5.2.17
%global major_ver %(echo %{version} | cut -d. -f1)
Name: python-django%{major_ver}
@@ -101,9 +101,9 @@ BuildRequires: python3-devel
BuildRequires: python3-asgiref
# see django/contrib/admin/static/admin/js/vendor/
-Provides: bundled(jquery) = 3.6.4
+Provides: bundled(jquery) = 3.7.1
Provides: bundled(select2) = 4.0.13
-Provides: bundled(xregexp) = 3.2.0
+Provides: bundled(xregexp) = 5.1.1
# Make sure this replaces any other Django package
Provides: python-django-impl
@@ -113,7 +113,7 @@ Conflicts: python-django-impl
%prep
%autosetup -N -n django-%{version}
-%autopatch -p1 -M 999
+#autopatch -p1 -M 999
%if %{with old_setuptools}
%autopatch -p1 1001
%endif
diff --git a/sources b/sources
index 997ba4b..fd77405 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (django-5.2.16.tar.gz) = 7925e20a35f261c05db6666522420e1f0fbc34a6097ecd4b80e82a4b05e1e5cf0e595355c93a2c15e7d7dbe469fbef152518b747b9389807c99b73886dd00a5f
+SHA512 (django-5.2.17.tar.gz) = 3f960e8227ab71d42f33700e689db6f359411d43efd3b138c59e66aac245a110f33458dcc9e7b27ddbda16b2a1c97e1e56ce00c9ace8294216eded8a4af8815f
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-09 10:59 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-09 10:59 [rpms/python-django5] f44: Update to version 5.2.17; Resolves: rhbz#2511083 Michel Lind
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox