CVS commit: pkgsrc/www/py-django

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Jan 14 15:55:07 UTC 2025

Modified Files:
        pkgsrc/www/py-django: Makefile distinfo

Log Message:
py-django: updated to 5.1.5

Django 5.1.5 fixes a security issue with severity “moderate” and one bug in 5.1.4.

CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation

Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address 
and is_valid_ipv6_address were vulnerable, as was the django.forms.GenericIPAddressField form field, which has now been updated to define a max_length of 39 characters.

The django.db.models.GenericIPAddressField model field was not affected.

Bugfixes

Fixed a crash when applying migrations with references to the removed Meta.index_together option


To generate a diff of this commit:
cvs rdiff -u -r1.137 -r1.138 pkgsrc/www/py-django/Makefile
cvs rdiff -u -r1.111 -r1.112 pkgsrc/www/py-django/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django/Makefile
diff -u pkgsrc/www/py-django/Makefile:1.137 pkgsrc/www/py-django/Makefile:1.138
--- pkgsrc/www/py-django/Makefile:1.137 Wed Dec  4 20:19:44 2024
+++ pkgsrc/www/py-django/Makefile       Tue Jan 14 15:55:07 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.137 2024/12/04 20:19:44 adam Exp $
+# $NetBSD: Makefile,v 1.138 2025/01/14 15:55:07 adam Exp $
 
-DISTNAME=      Django-5.1.4
+DISTNAME=      Django-5.1.5
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

Index: pkgsrc/www/py-django/distinfo
diff -u pkgsrc/www/py-django/distinfo:1.111 pkgsrc/www/py-django/distinfo:1.112
--- pkgsrc/www/py-django/distinfo:1.111 Wed Dec  4 20:19:44 2024
+++ pkgsrc/www/py-django/distinfo       Tue Jan 14 15:55:07 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.111 2024/12/04 20:19:44 adam Exp $
+$NetBSD: distinfo,v 1.112 2025/01/14 15:55:07 adam Exp $
 
-BLAKE2s (Django-5.1.4.tar.gz) = 6449f91a43f7a7dd769307699f8ccbd2cbfe0c073a2c6c611c3a753a1cf2aabf
-SHA512 (Django-5.1.4.tar.gz) = 252c185b82da60fb8b1be9c284e8912f5f2846f10a314bc5e611a24e499ea31d7dc29b31a4de16ee3329b1e6861d7faf02b65a043e8a2a28328541105a1e7dc3
-Size (Django-5.1.4.tar.gz) = 10716397 bytes
+BLAKE2s (Django-5.1.5.tar.gz) = 8af009a388dc3b0020a69452f617b8714510ed23c067ae04ae195ce5368d8909
+SHA512 (Django-5.1.5.tar.gz) = cc28eb7166d9babdb3f3d61cc87eb9ed038d7115bd7de7da5b9cff33da114c334fd51140d32c597229cd07e400520bc92ebf69611c6a455ac926f3e9eaa5ee88
+Size (Django-5.1.5.tar.gz) = 10700031 bytes