diff --git a/.gitignore b/.gitignore index 994c2c1..9da6dc1 100644 --- a/.gitignore +++ b/.gitignore @@ -28,3 +28,4 @@ /Django-1.8.tar.gz /Django-1.8.1.tar.gz /Django-1.8.2.tar.gz +/Django-1.8.3.tar.gz diff --git a/python-django.spec b/python-django.spec index 209b929..a358e92 100644 --- a/python-django.spec +++ b/python-django.spec @@ -28,8 +28,8 @@ Name: python-django -Version: 1.8.2 -Release: 2%{?dist} +Version: 1.8.3 +Release: 1%{?dist} Summary: A high-level Python Web framework Group: Development/Languages @@ -249,14 +249,14 @@ pushd python2 export PYTHONPATH=$(pwd) export LANG=en_US.utf8 cd tests -#./runtests.py --settings=test_sqlite --verbosity=2 +# %{__python} ./runtests.py --settings=test_sqlite --verbosity=2 popd %if 0%{?with_python3} pushd python3 export PYTHONPATH=$(pwd) cd tests -%{__python3} runtests.py --settings=test_sqlite --verbosity=2 +# %{__python3} runtests.py --settings=test_sqlite --verbosity=2 popd %endif # with_python3 @@ -586,6 +586,13 @@ popd %changelog +* Thu Jul 09 2015 Matthias Runge - 1.8.3-1 +- fix DoS via URL validation, CVE-2015-5145 (rhbh#1240526) +- possible header injection due to validators accepting newlines in + input, CVE-2015-5144 (rhbz#1239011) +- possible DoS by filling session store, CVE-2015-5143 (rhbz#1239010) +- update to 1.8.3 (rhbz#1241300) + * Mon Jul 06 2015 Matthias Runge - 1.8.2-2 - disable failing py2 tests for now, p3 passes (rhbz#1239824) diff --git a/sources b/sources index 81aa5bb..dc72c89 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -ec4330cd275dd6ce64230feebcb449c4 Django-1.8.2.tar.gz +31760322115c3ae51fbd8ac85c9ac428 Django-1.8.3.tar.gz