python-Django

Edit Package python-Django

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design.

Refresh
Refresh
Source Files
Filename Size Changed
Django-3.2.5.tar.gz 0009806547 9.35 MB
Django-3.2.5.tar.gz.asc 0000002543 2.48 KB
Django-3.2.tar.gz 0009819119 9.36 MB
Django-3.2.tar.gz.asc 0000002532 2.47 KB
python-Django-rpmlintrc 0000000214 214 Bytes
python-Django.changes 0000109474 107 KB
python-Django.keyring 0000028274 27.6 KB
python-Django.spec 0000005396 5.27 KB
Revision 3 (latest revision is 8)
Markéta Machová's avatar Markéta Machová (mcalabkova) committed (revision 3)
- Update to 3.2.5 (CVE-2021-35042, bsc#1187785)
  + Fixed a regression in Django 3.2 that caused a crash of
    QuerySet.values_list(..., named=True) after prefetch_related()
  + Fixed a bug in Django 3.2 that caused a migration crash on MySQL
    8.0.13+ when altering BinaryField, JSONField, or TextField to
    non-nullable
  + Fixed a regression in Django 3.2 that caused a migration crash on
    MySQL 8.0.13+ when adding nullable BinaryField, JSONField, or
    TextField with a default value
  + Fixed a bug in Django 3.2 where a system check would crash on a
    model with an invalid app_label

- Update to 3.2.4 (CVE-2021-33203, CVE-2021-33571)
  + CVE-2021-33203: Potential directory traversal via admindocs
  + CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks
    since validators accepted leading zeros in IPv4 addresses
  + Fixed a bug in Django 3.2 where a final catch-all view in the
    admin didn’t respect the server-provided value of SCRIPT_NAME when
    redirecting unauthenticated users to the login page
  + Fixed a bug in Django 3.2 where a system check would crash on an
    abstract model
  + Prevented unnecessary initialization of unused caches following a
    regression in Django 3.2
  + Fixed a crash in Django 3.2 that could occur when running mod_wsgi
    with the recommended settings while the Windows colorama library
    was installed
  + Fixed a bug in Django 3.2 that would trigger the auto-reloader for
    template changes when directory paths were specified with strings
  + Fixed a regression in Django 3.2 that caused a crash of
    auto-reloader with AttributeError, e.g. inside a Conda environment
Comments 0
openSUSE Build Service is sponsored by