mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-02-26 06:10:50 +00:00
python3-django: upgrade 3.2.4 -> 3.2.5 (fix CVE-2021-35042)
3.2.5 fixes CVE-2021-35042: Potential SQL injection via unsanitized
QuerySet.order_by() input.
Additional release notes:
- Fixed a regression in Django 3.2 that caused a crash of
QuerySet.values_list(…, named=True) after prefetch_related() (#32812).
- Fixed a bug in Django 3.2 that caused a migration crash on MySQL 8.0.13+
when altering BinaryField, JSONField, or TextField to non-nullable
(#32503).
- Fixed a regression in Django 3.2 that caused a migration crash on MySQL
8.0.13+ when adding nullable BinaryField, JSONField, or TextField with a
default value (#32832).
- Fixed a bug in Django 3.2 where a system check would crash on a model
with an invalid app_label (#32863).
There is no corresponding uprev for the 2.x LTS branch since it is
already at the latest version (2.2.24).
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit fe50bd1005)
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
committed by
Armin Kuster
parent
6a7ba8f7f2
commit
98e00710b7
13
meta-python/recipes-devtools/python/python3-django_3.2.5.bb
Normal file
13
meta-python/recipes-devtools/python/python3-django_3.2.5.bb
Normal file
@@ -0,0 +1,13 @@
|
||||
require python-django.inc
|
||||
inherit setuptools3
|
||||
|
||||
SRC_URI[sha256sum] = "3da05fea54fdec2315b54a563d5b59f3b4e2b1e69c3a5841dda35019c01855cd"
|
||||
|
||||
RDEPENDS_${PN} += "\
|
||||
${PYTHON_PN}-sqlparse \
|
||||
"
|
||||
|
||||
# Set DEFAULT_PREFERENCE so that the LTS version of django is built by
|
||||
# default. To build the 3.x branch,
|
||||
# PREFERRED_VERSION_python3-django = "3.2.2" can be added to local.conf
|
||||
DEFAULT_PREFERENCE = "-1"
|
||||
Reference in New Issue
Block a user