CVS commit: pkgsrc/www/py-django2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jun  3 15:28:38 UTC 2020

Modified Files:
        pkgsrc/www/py-django2: Makefile distinfo

Log Message:
py-django2: updated to 2.2.13

Django 2.2.13 fixes two security issues and a regression in 2.2.12.

CVE-2020-13254: Potential data leakage via malformed memcached keys

In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage. In order to avoid this vulnerability, key 
validation is added to the memcached cache backends.

CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget

Query parameters for the admin ForeignKeyRawIdWidget were not properly URL encoded, posing an XSS attack vector. ForeignKeyRawIdWidget now ensures query parameters are correctly URL encoded.

Bugfixes

Fixed a regression in Django 2.2.12 that affected translation loading for apps providing translations for territorial language variants as well as a generic language, where the project has different 
plural equations for the language.
Tracking a jQuery security release, upgraded the version of jQuery used by the admin from 3.3.1 to 3.5.1.


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.28 pkgsrc/www/py-django2/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/www/py-django2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django2/Makefile
diff -u pkgsrc/www/py-django2/Makefile:1.27 pkgsrc/www/py-django2/Makefile:1.28
--- pkgsrc/www/py-django2/Makefile:1.27 Mon Apr  6 16:58:56 2020
+++ pkgsrc/www/py-django2/Makefile      Wed Jun  3 15:28:38 2020
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2020/04/06 16:58:56 adam Exp $
+# $NetBSD: Makefile,v 1.28 2020/06/03 15:28:38 adam Exp $
 
-DISTNAME=      Django-2.2.12
+DISTNAME=      Django-2.2.13
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

Index: pkgsrc/www/py-django2/distinfo
diff -u pkgsrc/www/py-django2/distinfo:1.25 pkgsrc/www/py-django2/distinfo:1.26
--- pkgsrc/www/py-django2/distinfo:1.25 Mon Apr  6 16:58:56 2020
+++ pkgsrc/www/py-django2/distinfo      Wed Jun  3 15:28:38 2020
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.25 2020/04/06 16:58:56 adam Exp $
+$NetBSD: distinfo,v 1.26 2020/06/03 15:28:38 adam Exp $
 
-SHA1 (Django-2.2.12.tar.gz) = 5df3303956e1e7f506dc382a79375276131ac709
-RMD160 (Django-2.2.12.tar.gz) = f2fc964169a46a083da047193ffb0be88afd55fa
-SHA512 (Django-2.2.12.tar.gz) = 3c01b606e34dd0abe5a03bc55bf7d9328a0da370c22bac4d15c3468512b26ad57fd07d942a2a34129ce18bcc5e86c67e163d0f4d5b7ea47e3e899ba7617ab28c
-Size (Django-2.2.12.tar.gz) = 8877061 bytes
+SHA1 (Django-2.2.13.tar.gz) = 7180a364ab9d630c4466a0cbd69b14726f3110f3
+RMD160 (Django-2.2.13.tar.gz) = 9fb4780499aea6b3d9c1e2255efa048809c89f2c
+SHA512 (Django-2.2.13.tar.gz) = 6daf3486d2f19eb159193df77a7525e5173ba5889ad5c587a6ec6bbf02c4ea94fa90b9a30a5310932fc9353a22c413208ab724c05740f844eccfe610da3ca68a
+Size (Django-2.2.13.tar.gz) = 8879757 bytes