#14 EPEL 8: Update to 2.2.13
Merged 2 years ago by mrunge. Opened 2 years ago by churchyard.
rpms/ churchyard/python-django epel8-2.2.13  into  epel8

file modified
+1
@@ -14,3 +14,4 @@ 

  /Django-2.2.2.tar.gz

  /Django-2.2.3.tar.gz

  /Django-2.2.9.tar.gz

+ /Django-2.2.13.tar.gz

file modified
+8 -1
@@ -12,7 +12,7 @@ 

  

  Name:           python-django

  

- Version:        2.2.9

+ Version:        2.2.13

  Release:        1%{?dist}

  Summary:        A high-level Python Web framework

  
@@ -383,6 +383,13 @@ 

  

  

  %changelog

+ * Sun Jun 07 2020 Miro Hrončok <mhroncok@redhat.com> - 2.2.13-1

+ - Update to 2.2.13

+ - Security fix for CVE-2020-7471 (rhbz#1798519)

+ - Security fix for CVE-2020-9402 (rhbz#1810094)

+ - Security fix for CVE-2020-13254 (rhbz#1843616)

+ - Security fix for CVE-2020-13596 (rhbz#1843626)

+ 

  * Tue Jan 07 2020 Matthias Runge <mrunge@redhat.com> - 2.2.9-1

  - fix CVE-2019-19844 (rhbz#1788429)

  

file modified
+1 -1
@@ -1,1 +1,1 @@ 

- SHA512 (Django-2.2.9.tar.gz) = f99c464be8639eb18fe30cf195f7e971c973fa26a0f44d09ab9ad7f331e7e5e1db8d22e1adaf04fe885e8750d38a6d85942e7039f737fe88a617f44514b6fd5b

+ SHA512 (Django-2.2.13.tar.gz) = 6daf3486d2f19eb159193df77a7525e5173ba5889ad5c587a6ec6bbf02c4ea94fa90b9a30a5310932fc9353a22c413208ab724c05740f844eccfe610da3ca68a

  • Security fix for CVE-2020-7471 (rhbz#1798516)
  • Security fix for CVE-2020-9402 (rhbz#1810093)
  • Security fix for CVE-2020-13254 (rhbz#1843617)
  • Security fix for CVE-2020-13596 (rhbz#1843627)

I cannot test this, because I get:

[MIRROR] LibRaw-0.19.5-1.el8.x86_64.rpm: Status code: 403 for https://infrastructure.fedoraproject.org/repo/rhel/rhel8/koji/latest/x86_64/RHEL-8-001/non_modular/LibRaw-0.19.5-1.el8.x86_64.rpm
[FAILED] LibRaw-0.19.5-1.el8.x86_64.rpm: Status code: 403 for https://infrastructure.fedoraproject.org/repo/rhel/rhel8/koji/latest/x86_64/RHEL-8-001/non_modular/LibRaw-0.19.5-1.el8.x86_64.rpm
(136-137/153): fribidi-1.0.4-8.el8.x8 81% [=============================       ] 5.0 MB/s |  60 MB     00:02 ETA
Error: Error downloading packages:
  Status code: 403 for https://infrastructure.fedoraproject.org/repo/rhel/rhel8/koji/latest/x86_64/RHEL-8-001/non_modular/LibRaw-0.19.5-1.el8.x86_64.rpm

Locally, and in koji:

DEBUG util.py:600:  Error: Error downloading packages:
DEBUG util.py:600:    Curl error (28): Timeout was reached for https://infrastructure.fedoraproject.org/repo/rhel/rhel8/koji/latest/x86_64/RHEL-8-001/non_modular/audit-libs-3.0-0.17.20191104git1c2f876.el8.x86_64.rpm [Connection timed out after 30001 milliseconds]

Thank you for the PR. Upstream does a great job with releasing sane and it should be safe to merge this as soon as infrastructure works again.

another try (on EPEL mailing list, it was suggested the problem is gone)

https://koji.fedoraproject.org/koji/taskinfo?taskID=45555901

Pull-Request has been merged by mrunge

2 years ago