Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Django for openSUSE:Factory checked in at 2021-07-10 22:53:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Django (Old) and /work/SRC/openSUSE:Factory/.python-Django.new.2625 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Django" Sat Jul 10 22:53:56 2021 rev:76 rq:903639 version:3.2.5 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Django/python-Django.changes 2021-06-11 22:29:54.490050580 +0200 +++ /work/SRC/openSUSE:Factory/.python-Django.new.2625/python-Django.changes 2021-07-10 22:54:06.835938478 +0200 @@ -1,0 +2,15 @@ +Thu Jul 1 07:50:35 UTC 2021 - Alberto Planas Dominguez <[email protected]> + +- Update to 3.2.5 (CVE-2021-35042, bsc#1187785) + + Fixed a regression in Django 3.2 that caused a crash of + QuerySet.values_list(..., named=True) after prefetch_related() + + Fixed a bug in Django 3.2 that caused a migration crash on MySQL + 8.0.13+ when altering BinaryField, JSONField, or TextField to + non-nullable + + Fixed a regression in Django 3.2 that caused a migration crash on + MySQL 8.0.13+ when adding nullable BinaryField, JSONField, or + TextField with a default value + + Fixed a bug in Django 3.2 where a system check would crash on a + model with an invalid app_label + +------------------------------------------------------------------- Old: ---- Django-3.2.4.tar.gz Django-3.2.4.tar.gz.asc New: ---- Django-3.2.5.tar.gz Django-3.2.5.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Django.spec ++++++ --- /var/tmp/diff_new_pack.7ILdFV/_old 2021-07-10 22:54:07.427933909 +0200 +++ /var/tmp/diff_new_pack.7ILdFV/_new 2021-07-10 22:54:07.431933878 +0200 @@ -23,7 +23,7 @@ %bcond_with memcached Name: python-Django # We want support LTS versions of Django - numbered 2.2 -> 3.2 -> 4.2 etc -Version: 3.2.4 +Version: 3.2.5 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ Django-3.2.4.tar.gz -> Django-3.2.5.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Django/Django-3.2.4.tar.gz /work/SRC/openSUSE:Factory/.python-Django.new.2625/Django-3.2.5.tar.gz differ: char 5, line 1 ++++++ Django-3.2.4.tar.gz.asc -> Django-3.2.5.tar.gz.asc ++++++ --- /work/SRC/openSUSE:Factory/python-Django/Django-3.2.4.tar.gz.asc 2021-06-11 22:29:54.478050559 +0200 +++ /work/SRC/openSUSE:Factory/.python-Django.new.2625/Django-3.2.5.tar.gz.asc 2021-07-10 22:54:06.587940392 +0200 @@ -2,20 +2,20 @@ Hash: SHA256 This file contains MD5, SHA1, and SHA256 checksums for the source-code -tarball and wheel files of Django 3.2.4, released June 2, 2021. +tarball and wheel files of Django 3.2.5, released July 1, 2021. To use this file, you will need a working install of PGP or other compatible public-key encryption software. You will also need to have the Django release manager's public key in your keyring. This key has -the ID ``E17DF5C82B4F9D00`` and can be imported from the MIT +the ID ``2EF56372BA48CD1B`` and can be imported from the MIT keyserver, for example, if using the open-source GNU Privacy Guard implementation of PGP: - gpg --keyserver pgp.mit.edu --recv-key E17DF5C82B4F9D00 + gpg --keyserver pgp.mit.edu --recv-key 2EF56372BA48CD1B or via the GitHub API: - curl https://github.com/carltongibson.gpg | gpg --import - + curl https://github.com/felixxm.gpg | gpg --import - Once the key is imported, verify this file: @@ -28,40 +28,40 @@ Release packages: ================= -https://www.djangoproject.com/m/releases/3.2/Django-3.2.4-py3-none-any.whl -https://www.djangoproject.com/m/releases/3.2/Django-3.2.4.tar.gz +https://www.djangoproject.com/m/releases/3.2/Django-3.2.5.tar.gz +https://www.djangoproject.com/m/releases/3.2/Django-3.2.5-py3-none-any.whl MD5 checksums ============= -d2975d6084b5740de5838ccf7db3e823 Django-3.2.4-py3-none-any.whl -2f30db9154efb8c9ed891781d29fae2a Django-3.2.4.tar.gz +46e306a5a775cace03a03d5a158ff767 Django-3.2.5.tar.gz +f6eb0de91e191b6e6114ded04a22ee89 Django-3.2.5-py3-none-any.whl SHA1 checksums ============== -a6a264af7bcc8906488f72d740022e006e0aeef8 Django-3.2.4-py3-none-any.whl -7b0875627bfd044cbfd3c9dc4b87c653a3cbe2dc Django-3.2.4.tar.gz +5a1e09930da6c0b1191eb82d466b8549edcb0c4c Django-3.2.5.tar.gz +e48eff0100da4bbf1012f0ffb7bb3067d1987a5f Django-3.2.5-py3-none-any.whl SHA256 checksums ================ -ea735cbbbb3b2fba6d4da4784a0043d84c67c92f1fdf15ad6db69900e792c10f Django-3.2.4-py3-none-any.whl -66c9d8db8cc6fe938a28b7887c1596e42d522e27618562517cc8929eb7e7f296 Django-3.2.4.tar.gz +3da05fea54fdec2315b54a563d5b59f3b4e2b1e69c3a5841dda35019c01855cd Django-3.2.5.tar.gz +c58b5f19c5ae0afe6d75cbdd7df561e6eb929339985dbbda2565e1cabb19a62e Django-3.2.5-py3-none-any.whl -----BEGIN PGP SIGNATURE----- -iQJPBAEBCAA5FiEE/l+2OHah1xioxnVW4X31yCtPnQAFAmC3RawbHGNhcmx0b24u -Z2lic29uQG5vdW1lbmFsLmVzAAoJEOF99cgrT50A8EsQAMabgJbrooZSgFkbW+eA -ZG9scgSr4bLaFxlELTmfNCR7+9XgJ01Zp5XSd8sclyY2U+pS3ENo8k/BPJLxUCmN -FbVgIJjy5KA+PoWZZtmmztlKqAL2mOGXmlzDjm8Y1U/LxaE1CgzgUOrWaD7zFWi6 -N6uCYdlA09O7D9Ea8cb//WEZi3DXkBYGgqMx8Xwe873+NUe42u4iFm/fG4VYz/Et -F9wfixawD6N1LAUtU/RITZi8jYV7ucHuPa/GggV3jFAKeLSJLakrc2dU9FQKvYl1 -GpVS2r008O1TomyOVRgyyiOrigH5UjjjT9X7gfw788dTGLwDeqWEeCc3cLUC9WYv -bsXdC4em/U04B069UB1ClECDTxykPnlY1oHpqhvpq6h5XJ0Ij9xGaRI0PGKhA/YG -lVgYkn9pOaYijrf1aYB7QMzz2sgmn/D7yBYsZGpYxTAP1PRXOBmPbe8Ja6vJZHrm -2n42qP5+0eejVmXqgzmQTBPFkFw31ypBQxEj9ivN8W8/LbnbeS4OCl9N/Qi3+LcS -wj5MYfuqBW1DaDbYiGGwpyo19yHsiy4OmLDLN3VTHxYzhp5WdcPDir7bw0zIzvCH -fsCkIsdDmYxLbb/c3jYQmjb363/6IUQ2z10MGIIcRbibBBPA3hjZNMfTFDs9D/pq -dlF/xCthoQA1INDsebQ0Any/ -=gTYU +iQJPBAEBCAA5FiEEq7LCqM0B8WE2GLcNLvVjcrpIzRsFAmDdYWQbHGZlbGlzaWFr +Lm1hcml1c3pAZ21haWwuY29tAAoJEC71Y3K6SM0bApAP/3K/JFGKqAkVr5HgTV9s +MPcarfFBYMSHQC1z/7coVwvfUlFUXVSxH37gJscQXN7jiP9jog70oU3Rn4SZbU4I +zYAhl22uQOn03aiLMGB31H4KHZ+yxVQjk2JK/F70e42J21oxIZq+pzvpHGQRCKIU +ZkqYBbbcvmsWQXGC40C+6pYSq5FsavL4vOI8GOTWEftyaWKiE0PenEdC08sbKjIs +Yyikme3alXDPyBBMU2B7c+gq7AOfJG9QIJewBaTa4AUsD0uZElk4oAXgudd9/3Lf +HmfU+Xp70zE3RbcY4ume9nPPaD+7BI5IN8HAerGeMhCymzDRFX5l1N0I0ypxZUpC +7WHHov/1T0hIZ8i9rfXr0xIqVtS1xvOnu3mtWrZf822gr7txM9910pyc1i3h4VX8 +q3SvuCghWwb5EHw4hWIt9oSkzCFkUxGQmomwG1ovPIq5ewdAowlAT31qFTIsiLbi +C0o5uhdUqWscEgVbsEMTKPO5y/MEcYZJeKIdDMcU/cf2jc5LsvhzWckwIqDoIv9l +54wzWKuc6q59ud4i/OcB/lSBDR4AP15nMKFpjXJ0ttbrQCgWwtZJmfrxamS7pUHK +XioTOEFCEahaezdDvE8u3y5QYWJ3tTUpaYXVolw60wGA0PgcygCSK2pJXxWbTPlm +A0C/kxyMs9QnOrs9QcAayhZT +=6WOu -----END PGP SIGNATURE-----
