From 56de003fa31dc3e30e915c0d97d5af5becbdbc01 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Tue, 19 Mar 2024 17:11:17 +0100 Subject: [PATCH] package/python-django: security bump to version 4.2.11 Fixes: CVE-2024-27351: Potential regular expression denial-of-service in django.utils.text.Truncator.words() https://www.djangoproject.com/weblog/2024/mar/04/security-releases/ Signed-off-by: Peter Korsgaard --- package/python-django/python-django.hash | 4 ++-- package/python-django/python-django.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-django/python-django.hash b/package/python-django/python-django.hash index a0cca1f30e..ca678327c8 100644 --- a/package/python-django/python-django.hash +++ b/package/python-django/python-django.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/django/json -md5 111a3d77ee7c7d95fd2187939d6e4deb Django-4.2.10.tar.gz -sha256 b1260ed381b10a11753c73444408e19869f3241fc45c985cd55a30177c789d13 Django-4.2.10.tar.gz +md5 33dc961e25b6ed54e22b62726b334d4d Django-4.2.11.tar.gz +sha256 6e6ff3db2d8dd0c986b4eec8554c8e4f919b5c1ff62a5b4390c17aff2ed6e5c4 Django-4.2.11.tar.gz # Locally computed sha256 checksums sha256 b846415d1b514e9c1dff14a22deb906d794bc546ca6129f950a18cd091e2a669 LICENSE diff --git a/package/python-django/python-django.mk b/package/python-django/python-django.mk index 6f082c679a..1647fc0593 100644 --- a/package/python-django/python-django.mk +++ b/package/python-django/python-django.mk @@ -4,10 +4,10 @@ # ################################################################################ -PYTHON_DJANGO_VERSION = 4.2.10 +PYTHON_DJANGO_VERSION = 4.2.11 PYTHON_DJANGO_SOURCE = Django-$(PYTHON_DJANGO_VERSION).tar.gz # The official Django site has an unpractical URL -PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/52/ae/84530c15c4df0830837a6417956f16ff1b410412915282db78a27a7fb03c +PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/d2/e2/c0e7586dd4db1140be179b1386346d1b2e2570dfc7c0d1c0343bdf0d43b0 PYTHON_DJANGO_LICENSE = BSD-3-Clause PYTHON_DJANGO_LICENSE_FILES = LICENSE PYTHON_DJANGO_CPE_ID_VENDOR = djangoproject