mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-12 09:13:59 -09:00
24e0c552a4
See the release notes:
- https://docs.djangoproject.com/en/5.2/releases/5.2.14/
- https://docs.djangoproject.com/en/5.2/releases/5.2.15/
This fixes the following vulnerabilities:
- CVE-2026-5766 : Potential denial-of-service vulnerability in ASGI requests
via file upload limit bypass
- CVE-2026-35192: Session fixation via public cached pages and
SESSION_SAVE_EVERY_REQUEST
- CVE-2026-6907 : Potential exposure of private data due to incorrect handling
of Vary: * in UpdateCacheMiddleware
- CVE-2026-6873 : Signed cookie salt namespace collision
- CVE-2026-7666 : Potential unencrypted email transmission via STARTTLS
in the SMTP backend
- CVE-2026-8404 : Potential exposure of private data via case-sensitive
Cache-Control directives
- CVE-2026-35193: Potential exposure of private data via missing
Vary: Authorization
- CVE-2026-48587: Potential exposure of private data via whitespace padding
in Vary header
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
(cherry picked from commit 00b9069f46)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
28 lines
1.1 KiB
Makefile
28 lines
1.1 KiB
Makefile
################################################################################
|
|
#
|
|
# python-django
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_DJANGO_VERSION = 5.2.15
|
|
PYTHON_DJANGO_SOURCE = django-$(PYTHON_DJANGO_VERSION).tar.gz
|
|
# The official Django site has an unpractical URL
|
|
PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/source/d/django
|
|
PYTHON_DJANGO_LICENSE = BSD-3-Clause, MIT (jquery, utils/archive.py), BSD-2-Clause (inlines.js)
|
|
PYTHON_DJANGO_LICENSE_FILES = LICENSE \
|
|
django/contrib/gis/measure.py \
|
|
django/contrib/gis/gdal/LICENSE \
|
|
django/contrib/gis/geos/LICENSE \
|
|
django/contrib/admin/static/admin/js/inlines.js \
|
|
django/contrib/admin/static/admin/js/vendor/jquery/LICENSE.txt \
|
|
django/contrib/admin/static/admin/js/vendor/select2/LICENSE.md \
|
|
django/contrib/admin/static/admin/js/vendor/xregexp/LICENSE.txt \
|
|
django/contrib/admin/static/admin/img/LICENSE \
|
|
django/dispatch/license.txt \
|
|
django/utils/archive.py
|
|
PYTHON_DJANGO_CPE_ID_VENDOR = djangoproject
|
|
PYTHON_DJANGO_CPE_ID_PRODUCT = django
|
|
PYTHON_DJANGO_SETUP_TYPE = setuptools
|
|
|
|
$(eval $(python-package))
|