public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Michel Lind <salimma@fedoraproject.org>
To: git-commits@fedoraproject.org
Subject: [rpms/python-django5] f43: Update to version 5.2.17; Resolves: rhbz#2511083
Date: Wed, 09 Sep 2026 16:30:28 GMT	[thread overview]
Message-ID: <178897142898.1.8279142785424924652.rpms-python-django5-969737a62647@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/python-django5
            Branch : f43
            Commit : 969737a62647651a685d2f408d5734f225718bd3
            Author : Michel Lind <salimma@fedoraproject.org>
            Date   : 2026-09-09T10:41:20+01:00
            Stats  : +6/-5 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-django5/c/969737a62647651a685d2f408d5734f225718bd3?branch=f43

            Log:
            Update to version 5.2.17; Resolves: rhbz#2511083

- Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups
- Fixes CVE-2026-15337 [low]: Potential denial-of-service vulnerability in check_for_language()
- Fixes CVE-2026-15830 [moderate]: Potential denial-of-service vulnerability via nested geometry collections
- Fixes CVE-2026-15920 [moderate]: Potential cross-site scripting via URLField values in the admin

Signed-off-by: Michel Lind <salimma@fedoraproject.org>

---
diff --git a/.gitignore b/.gitignore
index d8b573d..e5d7077 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
 /django-5.2.14.tar.gz
 /django-5.2.15.tar.gz
 /django-5.2.16.tar.gz
+/django-5.2.17.tar.gz

diff --git a/python-django5.spec b/python-django5.spec
index 3fc3f0b..f5d525e 100644
--- a/python-django5.spec
+++ b/python-django5.spec
@@ -23,7 +23,7 @@
 %bcond old_setuptools 0
 %endif
 
-Version:        5.2.16
+Version:        5.2.17
 %global major_ver %(echo %{version} | cut -d. -f1)
 Name:           python-django%{major_ver}
 
@@ -101,9 +101,9 @@ BuildRequires:  python3-devel
 BuildRequires:  python3-asgiref
 
 # see django/contrib/admin/static/admin/js/vendor/
-Provides:       bundled(jquery) = 3.6.4
+Provides:       bundled(jquery) = 3.7.1
 Provides:       bundled(select2) = 4.0.13
-Provides:       bundled(xregexp) = 3.2.0
+Provides:       bundled(xregexp) = 5.1.1
 
 # Make sure this replaces any other Django package
 Provides:       python-django-impl
@@ -113,7 +113,7 @@ Conflicts:      python-django-impl
 
 %prep
 %autosetup -N -n django-%{version}
-%autopatch -p1 -M 999
+#autopatch -p1 -M 999
 %if %{with old_setuptools}
 %autopatch -p1 1001
 %endif

diff --git a/sources b/sources
index 997ba4b..fd77405 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (django-5.2.16.tar.gz) = 7925e20a35f261c05db6666522420e1f0fbc34a6097ecd4b80e82a4b05e1e5cf0e595355c93a2c15e7d7dbe469fbef152518b747b9389807c99b73886dd00a5f
+SHA512 (django-5.2.17.tar.gz) = 3f960e8227ab71d42f33700e689db6f359411d43efd3b138c59e66aac245a110f33458dcc9e7b27ddbda16b2a1c97e1e56ce00c9ace8294216eded8a4af8815f

                 reply	other threads:[~2026-09-09 16:30 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178897142898.1.8279142785424924652.rpms-python-django5-969737a62647@fedoraproject.org \
    --to=salimma@fedoraproject.org \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox