From 301587f5ef3b3a8f0899ea4222d45a837d5772eb Mon Sep 17 00:00:00 2001 From: Marcus Hoffmann Date: Tue, 10 Jun 2025 16:47:52 +0200 Subject: [PATCH] package/python-django: security bump to 5.2.3 Followup release to 5.2.2 that completes the mitigations for CVE-2025-48432[1]. Full changelog: https://docs.djangoproject.com/en/5.2/releases/5.2.3/ [1] https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases/ Signed-off-by: Marcus Hoffmann Signed-off-by: Julien Olivain --- package/python-django/python-django.hash | 4 ++-- package/python-django/python-django.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-django/python-django.hash b/package/python-django/python-django.hash index 14ed13fd6c..0dd687164e 100644 --- a/package/python-django/python-django.hash +++ b/package/python-django/python-django.hash @@ -1,6 +1,6 @@ # md5, sha256 from https://pypi.org/pypi/django/json -md5 782577f532efab32f8119a7071f55d04 django-5.2.2.tar.gz -sha256 85852e517f84435e9b13421379cd6c43ef5b48a9c8b391d29a26f7900967e952 django-5.2.2.tar.gz +md5 0b2266b4a1aaed942e0a94ce8a18913d django-5.2.3.tar.gz +sha256 335213277666ab2c5cac44a792a6d2f3d58eb79a80c14b6b160cd4afc3b75684 django-5.2.3.tar.gz # Locally computed sha256 checksums sha256 b846415d1b514e9c1dff14a22deb906d794bc546ca6129f950a18cd091e2a669 LICENSE sha256 dcac1c86cb7ab491702bdb4c41be680fafde51536748cc8aaee3840eec53ed17 django/contrib/gis/measure.py diff --git a/package/python-django/python-django.mk b/package/python-django/python-django.mk index e36ab5385d..77e9a11839 100644 --- a/package/python-django/python-django.mk +++ b/package/python-django/python-django.mk @@ -4,10 +4,10 @@ # ################################################################################ -PYTHON_DJANGO_VERSION = 5.2.2 +PYTHON_DJANGO_VERSION = 5.2.3 PYTHON_DJANGO_SOURCE = django-$(PYTHON_DJANGO_VERSION).tar.gz # The official Django site has an unpractical URL -PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/39/17/4567ee12bb84114c544d5c4a792e7226db517ac78f552111e9dc62d1de14 +PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/c6/af/77b403926025dc6f7fd7b31256394d643469418965eb528eab45d0505358 PYTHON_DJANGO_LICENSE = BSD-3-Clause, MIT (jquery, utils/archive.py), BSD-2-Clause (inlines.js) PYTHON_DJANGO_LICENSE_FILES = LICENSE \ django/contrib/gis/measure.py \