python3-django: upgrade 5.2.16 -> 5.2.17

Release Notes:
https://docs.djangoproject.com/en/dev/releases/5.2.17/

CVE: CVE-2026-15307 CVE-2026-15337 CVE-2026-15830 CVE-2026-15920

Backport Changes:
- Django 5.2.17 requires setuptools >= 83, the first
  upstream release containing the fix [1]. Wrynose provides
  setuptools 82.0.1 with that fix backported, so retain the
  previous build requirement.

[1] https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 8a4bf31e7f)
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-09-11 08:02:17 +05:30
committed by Anuj Mittal
parent 5250a6f557
commit f311c7bdfc
3 changed files with 34 additions and 5 deletions
@@ -0,0 +1,28 @@
From 7a05df92b0820675803a5e8e73d20b9453538d68 Mon Sep 17 00:00:00 2001
From: Darsh Kelaiya <dkelaiya@cisco.com>
Date: Fri, 21 Aug 2026 00:20:00 -0700
Subject: [PATCH] pyproject.toml: lower setuptools requirement for Wrynose
Django 5.2.17 requires setuptools >= 83, the first upstream release
containing the fix for [1]. Wrynose provides setuptools 82.0.1
with upstream commit dd9f436 backported, so retain the previous build
requirement.
[1] https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c
Upstream-Status: Inappropriate [Wrynose-specific toolchain compatibility]
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
---
pyproject.toml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pyproject.toml b/pyproject.toml
index b2327d6..e2d8244 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,3 +1,3 @@
[build-system]
-requires = ["setuptools>=83"]
+requires = ["setuptools>=77.0.3"]
build-backend = "setuptools.build_meta"
@@ -1,5 +0,0 @@
require python3-django.inc
inherit python_setuptools_build_meta
SRC_URI += "file://0001-fix-test_msgfmt_error_including_non_ascii-test.patch"
SRC_URI[sha256sum] = "59ea02020c3136fce14bef0bbece21a10a4febef5eed1c51c22ae468efa22200"
@@ -0,0 +1,6 @@
require python3-django.inc
inherit python_setuptools_build_meta
SRC_URI += "file://0001-fix-test_msgfmt_error_including_non_ascii-test.patch \
file://0001-pyproject-lower-setuptools-requirement.patch"
SRC_URI[sha256sum] = "9d4d93be539a18ab80d058eb515900e10951e04c537c5a6b394fc49528d3251f"