Titouan Christophe 24e0c552a4 package/python-django: security bump to v5.2.15 ...

See the release notes:
- https://docs.djangoproject.com/en/5.2/releases/5.2.14/
- https://docs.djangoproject.com/en/5.2/releases/5.2.15/

This fixes the following vulnerabilities:
- CVE-2026-5766 : Potential denial-of-service vulnerability in ASGI requests
                  via file upload limit bypass
- CVE-2026-35192: Session fixation via public cached pages and
                  SESSION_SAVE_EVERY_REQUEST
- CVE-2026-6907 : Potential exposure of private data due to incorrect handling
                  of Vary: * in UpdateCacheMiddleware
- CVE-2026-6873 : Signed cookie salt namespace collision
- CVE-2026-7666 : Potential unencrypted email transmission via STARTTLS
                  in the SMTP backend
- CVE-2026-8404 : Potential exposure of private data via case-sensitive
                  Cache-Control directives
- CVE-2026-35193: Potential exposure of private data via missing
                  Vary: Authorization
- CVE-2026-48587: Potential exposure of private data via whitespace padding
                  in Vary header

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
(cherry picked from commit 00b9069f46)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>

2026-06-18 14:58:35 +02:00

..

Config.in

…

python-django.hash

package/python-django: security bump to v5.2.15

2026-06-18 14:58:35 +02:00

python-django.mk

package/python-django: security bump to v5.2.15

2026-06-18 14:58:35 +02:00