Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Django4 for openSUSE:Factory checked in at 2026-03-04 21:09:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Django4 (Old) and /work/SRC/openSUSE:Factory/.python-Django4.new.561 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Django4" Wed Mar 4 21:09:52 2026 rev:2 rq:1336304 version:4.2.29 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Django4/python-Django4.changes 2026-02-24 15:38:55.019207065 +0100 +++ /work/SRC/openSUSE:Factory/.python-Django4.new.561/python-Django4.changes 2026-03-04 21:10:41.490020794 +0100 @@ -1,0 +2,7 @@ +Wed Mar 4 09:18:08 UTC 2026 - Markéta Machová <[email protected]> + +- Update to 4.2.29 + * CVE-2026-25674: Potential incorrect permissions on newly created + file system objects (bsc#1259142) + +------------------------------------------------------------------- Old: ---- Django-4.2.28.checksum.txt django-4.2.28.tar.gz New: ---- Django-4.2.29.checksum.txt django-4.2.29.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Django4.spec ++++++ --- /var/tmp/diff_new_pack.oZEHxp/_old 2026-03-04 21:10:42.486061778 +0100 +++ /var/tmp/diff_new_pack.oZEHxp/_new 2026-03-04 21:10:42.486061778 +0100 @@ -1,7 +1,7 @@ # # spec file for package python-Django4 # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -29,7 +29,7 @@ %{?sle15_python_module_pythons} Name: python-Django4 # We want support LTS versions of Django - numbered 2.2 -> 3.2 -> 4.2 etc -Version: 4.2.28 +Version: 4.2.29 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ Django-4.2.28.checksum.txt -> Django-4.2.29.checksum.txt ++++++ --- /work/SRC/openSUSE:Factory/python-Django4/Django-4.2.28.checksum.txt 2026-02-24 15:38:54.015165386 +0100 +++ /work/SRC/openSUSE:Factory/.python-Django4.new.561/Django-4.2.29.checksum.txt 2026-03-04 21:10:41.270011702 +0100 @@ -2,24 +2,24 @@ Hash: SHA256 This file contains MD5, SHA1, and SHA256 checksums for the -source-code tarball and wheel files of Django 4.2.28, released February 3, 2026. +source-code tarball and wheel files of Django 4.2.29, released March 3, 2026. To use this file, you will need a working install of PGP or other compatible public-key encryption software. You will also need to have the Django release manager's public key in your keyring. This key has -the ID ``131403F4D16D8DC7`` and can be imported from the MIT +the ID ``2EE82A8D9470983E`` and can be imported from the MIT keyserver, for example, if using the open-source GNU Privacy Guard implementation of PGP: - gpg --keyserver pgp.mit.edu --recv-key 131403F4D16D8DC7 + gpg --keyserver pgp.mit.edu --recv-key 2EE82A8D9470983E or via the GitHub API: - curl https://github.com/jacobtylerwalls.gpg | gpg --import - + curl https://github.com/nessita.gpg | gpg --import - Once the key is imported, verify this file: - gpg --verify Django-4.2.28.checksum.txt + gpg --verify Django-4.2.29.checksum.txt Once you have verified this file, you can use normal MD5, SHA1, or SHA256 checksumming applications to generate the checksums of the Django @@ -28,40 +28,40 @@ Release packages ================ -https://www.djangoproject.com/download/4.2.28/tarball/ -https://www.djangoproject.com/download/4.2.28/wheel/ +https://www.djangoproject.com/download/4.2.29/tarball/ +https://www.djangoproject.com/download/4.2.29/wheel/ MD5 checksums ============= -7c9bf3734061c4b22bdf4d922308fe62 django-4.2.28.tar.gz -1593416db2d022b69bb3fe68a6194b3e django-4.2.28-py3-none-any.whl +8fa52c7ec011ebaa7fcf6fba78561346 django-4.2.29.tar.gz +b92fcf3eef0114f52ee8f3fc766de6a2 django-4.2.29-py3-none-any.whl SHA1 checksums ============== -e0a589cf92e1887d55cd2b02071aa0383615cc2c django-4.2.28.tar.gz -058fd51c9265f630673068f196220bfe88d0724b django-4.2.28-py3-none-any.whl +fa2d7682f482f2d86b10f4ce2b7c0a8b0d382cc0 django-4.2.29.tar.gz +c6dc4a23516266344e89f69bb9d1b2cbe09d4f11 django-4.2.29-py3-none-any.whl SHA256 checksums ================ -a4b9cd881991add394cafa8bb3b11ad1742d1e1470ba99c3ef53dc540316ccfe django-4.2.28.tar.gz -49a23c1b83ef31525f8d71a57b040f91d34660edb3f086280a8519855655ed3c django-4.2.28-py3-none-any.whl +86d91bc8086569c8d08f9c55888b583a921ac1f95ed3bdc7d5659d4709542014 django-4.2.29.tar.gz +074d7c4d2808050e528388bda442bd491f06def4df4fe863f27066851bba010c django-4.2.29-py3-none-any.whl -----BEGIN PGP SIGNATURE----- -iQIzBAEBCAAdFiEEU9RpQuAGoqPu3IvIExQD9NFtjccFAmmB+NgACgkQExQD9NFt -jccTsw/+IwM+KVh+ALt36YZrgYaV6UeLmqI/UxcsxQkysNejdA36oLYiz6rWsKL+ -Y21MPmNQrPwefkIoOZckEB4EsKWVAARWcaHIfZRIid82htmyoP2Y/WY2vNZR44nD -rpVgRVpz+C9CRYCR9pO20MmRO0EzZ/TAzGE1tqNgC0WzUxBoqeWLeGIVfCycjsBC -8pNqGenwKiV0siT8Id2prMq2ubfaf1lDbJP1/SMzDviFrizZnGGftcQ/J7Xztzlv -FAasaM1dIBP0b+iVHBEr/dwYCD8RSsyO2cC+5J/3QCKIWdq3sCsnKMnj6C2uzTmQ -lJSFJjMrLUhl1gH2Rq/vHJlyuKFIvwPAPsccLHi5Li2QT0D9mHqPiXDOcr4dSOWO -vVeql0SuTi2Ip1hjfg5zegDwRviWrUg0hcAabENJ8xcBL0+HXRGAaV9LFCtunuaQ -ODj+ib+9BhOXo+o2gDWX1hPiiD9PUDIKzvvpk8b9fh/9VLk+A2QCeaGOpx9NfQjp -toXkmxC6p7nsjc4qmlXBJJ3WuU9Y+vMYrtRicIUM9GP0MyOoq5EI55XkIFssW37g -IMDv1nYTyX6IM3L/J0UWZM4odZb1d/TCGPN52JF5K+Hylllv4VgtPMTKHCJ9w1xj -HQyQRqUlzFA9rZAG7N29xLS2mI7PE8Z+CxTaYRKaxfBVml2R0+I= -=vDVk +iQIzBAEBCAAdFiEEW1sboQ2FrHxcduOPLugqjZRwmD4FAmmm0zcACgkQLugqjZRw +mD45KA//b5YP/GYtIB98Opt/uWclwb1T3KlSIDsw5YrS1+iovYc1nHbxV5VD1pWX +BKvKL8XFJWrDc8EYsqDX15LmXPuN2LH3f4jDbXFiCT1EgxW1wal3JDgs4/hsoBEk +5GwQtcElzzEAUIWWGuQjrY2koTrfAUJeJxTWXhPyUwZvmVukwgreb3rPy8bT4/Qi +3eCPC+BDbD88KkzeRbctsnidpxIvrVFv+W/JB9fmAbRBiIsIXzY3urX0BCIkv8ix +gDPFoAKWAovICS8YXyZsSolYYKCsVsUgwmhbAJZrIzVyGjvGMpiC312kQn081yYj +5tGXAwrQ4kmOHLjt3gciQr5uYRyTRkC6zrVfTP6IZmpvcngxi/V0ks/in/eliAmW +WtHSEyboqSgAmThti6rfEwqWQLXXKi1Q91cu1imeRyCoMIhHFxZuZ0diWfQRY0b/ +BR2BQgLsCBSvZaVqPn5Hnt0yNJ+h4s9LNtvp9ei5ZUbIOybou1v8BEjaasmiWjp0 +XNM2lUtVLQGwmE1jSGXRZeaDoVYFVWZq9qHancYb8AnKFewYg9GVEjsuYY6GwA3y +Syp3CVgYN0F1jO0dfkRKP7/iq6HXe04GYV4Ro27iLDm/H/XZh+/7nDh5YTRunpor +icA2EkN6ZIbZCnXP5m3njsWRj9BDDpMknYngyiJqkNcxO1sKOYM= +=7xsK -----END PGP SIGNATURE----- ++++++ django-4.2.28.tar.gz -> django-4.2.29.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Django4/django-4.2.28.tar.gz /work/SRC/openSUSE:Factory/.python-Django4.new.561/django-4.2.29.tar.gz differ: char 5, line 1
