diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2018-08-17 16:47:36 +0200 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2018-08-17 18:58:05 +0200 |
| commit | ae977e942893ac7e5c9b69418f047acae1603c27 (patch) | |
| tree | 1deeb3abba2de967733864e9558912e814e6c99c /package/python-django/python-django.hash | |
| parent | c48f8a64626c60bd1b46804b7cf1a699ff53cdf3 (diff) | |
| download | buildroot-ae977e942893ac7e5c9b69418f047acae1603c27.tar.gz buildroot-ae977e942893ac7e5c9b69418f047acae1603c27.zip | |
python-django: security bump to version 1.11.15
Bump to the latest release of the 1.11.x LTS series as 1.10.x is no longer
supported upstream:
https://www.djangoproject.com/download/
Fixes the following security issues:
- CVE-2017-12794: Possible XSS in traceback section of technical 500 debug
page (1.11.5)
- CVE-2018-6188: Information leakage in AuthenticationForm (1.11.10)
- CVE-2018-7536: Denial-of-service possibility in urlize and urlizetrunc
template filters (1.11.11)
- CVE-2018-7537: Denial-of-service possibility in truncatechars_html and
truncatewords_html template filters (1.11.11)
- CVE-2018-14574: Open redirect possibility in CommonMiddleware (1.11.15)
Also add a hash for the license file.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/python-django/python-django.hash')
| -rw-r--r-- | package/python-django/python-django.hash | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/package/python-django/python-django.hash b/package/python-django/python-django.hash index 09be18440b..bc7aed9479 100644 --- a/package/python-django/python-django.hash +++ b/package/python-django/python-django.hash @@ -1,3 +1,3 @@ -# md5 from https://pypi.python.org/pypi/django/json, sha256 locally computed -md5 693dfeabad62c561cb205900d32c2a98 Django-1.10.7.tar.gz -sha256 593d779dbc2350a245c4f76d26bdcad58a39895e87304fe6d725bbdf84b5b0b8 Django-1.10.7.tar.gz +# From https://www.djangoproject.com/m/pgp/Django-1.11.15.checksum.txt +sha256 b18235d82426f09733d2de9910cee975cf52ff05e5f836681eb957d105a05a40 Django-1.11.15.tar.gz +sha256 b846415d1b514e9c1dff14a22deb906d794bc546ca6129f950a18cd091e2a669 LICENSE |
