Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Django for openSUSE:Factory checked in at 2026-08-06 16:18:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Django (Old) and /work/SRC/openSUSE:Factory/.python-Django.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Django" Thu Aug 6 16:18:56 2026 rev:152 rq:1369745 version:6.0.8 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Django/python-Django.changes 2026-07-15 16:25:11.668869738 +0200 +++ /work/SRC/openSUSE:Factory/.python-Django.new.16738/python-Django.changes 2026-08-06 16:19:07.654009788 +0200 @@ -1,0 +2,18 @@ +Wed Aug 5 12:02:09 UTC 2026 - Markéta Machová <[email protected]> + +- Update to 6.0.8 + * CVE-2026-15307: Server-side file-write and request forgery via + spatial lookups (bsc#1272997) + * CVE-2026-15337: Potential denial-of-service vulnerability in + check_for_language() (bsc#1272998) + * CVE-2026-15830: Potential denial-of-service vulnerability via + nested geometry collections (bsc#1272999) + * CVE-2026-15920: Potential cross-site scripting via URLField + values in the admin (bsc#1273000) + * Fixed a regression in Django 6.0 that caused bulk_create() to + crash on databases that support returning rows from bulk inserts + when a related object providing the primary key was saved after + assignment + * Added compatibility for sqlparse 0.5.5 + +------------------------------------------------------------------- Old: ---- Django-6.0.7.checksum.txt django-6.0.7.tar.gz New: ---- Django-6.0.8.checksum.txt django-6.0.8.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Django.spec ++++++ --- /var/tmp/diff_new_pack.aGOqwu/_old 2026-08-06 16:19:08.870052212 +0200 +++ /var/tmp/diff_new_pack.aGOqwu/_new 2026-08-06 16:19:08.874052352 +0200 @@ -27,7 +27,7 @@ %endif %define skip_python311 1 Name: python-Django -Version: 6.0.7 +Version: 6.0.8 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ Django-6.0.7.checksum.txt -> Django-6.0.8.checksum.txt ++++++ --- /work/SRC/openSUSE:Factory/python-Django/Django-6.0.7.checksum.txt 2026-07-15 16:25:10.532831051 +0200 +++ /work/SRC/openSUSE:Factory/.python-Django.new.16738/Django-6.0.8.checksum.txt 2026-08-06 16:19:06.901983551 +0200 @@ -2,7 +2,7 @@ Hash: SHA256 This file contains MD5, SHA1, and SHA256 checksums for the -source-code tarball and wheel files of Django 6.0.7, released July 7, 2026. +source-code tarball and wheel files of Django 6.0.8, released August 4, 2026. It also includes the commit hash of the release tag, identifying the exact source revision the artifacts were built from. @@ -10,14 +10,14 @@ To use this file, you will need a working install of PGP or other compatible public-key encryption software. You will also need to have the Django release manager's public key in your keyring. This key has -the ID ``131403F4D16D8DC7`` and can be imported from GitHub, for example, if +the ID ``2EE82A8D9470983E`` and can be imported from GitHub, for example, if using the open-source GNU Privacy Guard implementation of PGP: - curl https://github.com/jacobtylerwalls.gpg | gpg --import - + curl https://github.com/nessita.gpg | gpg --import - Once the key is imported, verify this file: - gpg --verify Django-6.0.7.checksum.txt + gpg --verify Django-6.0.8.checksum.txt Once you have verified this file, you can use normal MD5, SHA1, or SHA256 checksumming applications to generate the checksums of the Django @@ -26,44 +26,44 @@ Release packages ================ -https://www.djangoproject.com/download/6.0.7/tarball/ -https://www.djangoproject.com/download/6.0.7/wheel/ +https://www.djangoproject.com/download/6.0.8/tarball/ +https://www.djangoproject.com/download/6.0.8/wheel/ MD5 checksums ============= -4e11c909aebe761ddbadedf5646da858 django-6.0.7.tar.gz -23bf6a1ac8052a26d6f99515fd5786ce django-6.0.7-py3-none-any.whl +0413664fa11a80f6e3e9257532828ddc django-6.0.8.tar.gz +975a5b831bd6600404eaf8738295f6e2 django-6.0.8-py3-none-any.whl SHA1 checksums ============== -8bee35398a7c41420f9456a710baca622b518640 django-6.0.7.tar.gz -3d2a6133b0d9954449c10032bf0be5415d0d1d37 django-6.0.7-py3-none-any.whl +ba8bd5c639f8de85e4169cea53ff53ccdd295cc7 django-6.0.8.tar.gz +759a490b195d6859bb961a3a7b7f1eddf5dcabab django-6.0.8-py3-none-any.whl SHA256 checksums ================ -2998503fc083124fb58037084bfa00de323c7c743f05f1b4284e77bff0ab8890 django-6.0.7.tar.gz -a037427c2288443a8c02a1b02295a31c239663aa682bc50b1976afb7cf6a769e django-6.0.7-py3-none-any.whl +cb0bd962d27fc866f3c514b20aae6a7df56ec80b488f9899da46d675cd051526 django-6.0.8.tar.gz +9b98b7e1902e0e575ea4f42c175fc9512784f7f2580898286aee3388b322219d django-6.0.8-py3-none-any.whl Git tag ======= -The 6.0.7 tag points to commit e2a424605ac2e7e6e799496542fb2997207e2f23. +The 6.0.8 tag points to commit b2821457e8bfa9e9066837b9f9b3a3955224ab19. -----BEGIN PGP SIGNATURE----- -iQIzBAEBCAAdFiEEU9RpQuAGoqPu3IvIExQD9NFtjccFAmpM7H8ACgkQExQD9NFt -jcfnlw//fBjHhdpb8+nVuJVjd60P063CSvatCxenIIq9iFsXzhLatS1bY/0El2y4 -kISgf4nrPI39d7s6v0xRxfGRgws2P7yX0zP4Ymud9y95HKrfWFWfOMv8jBUa3P9v -v4QHGPqrlbmnjqfM+PceJ7ztqnq9j4NZrOoDTsBpMm528kVLpL95QeNWUKNqpJ3D -TrsXY3Cap5JyJ+AHd79ph2e/njdCuK2xAfiKUmOD7+CG7ukvOZ/A4mgI/DRuh7iF -v4zIjk0L/HoQpx6HG7aNCmVRa4KOfI01hUkdheEXUEOfHSOpyRxX0aKkWBI0pETS -5PNSHr39dwWlpFHWnuCj7HZRFsBnwP6Ha4bVCulB//Hc2mpH3TfAijBtxVytVuI3 -UmHNqrxbs1iFz22l30FzhJ+lqWstHN8/elaUj7x59IQO7plITfwO6+BB1sb+UIWy -2vAw1P/tmNvkcdgVXd7Qh8Xj/8BZM7IUoh9lZ6n1JXm5W/fzFUkC+r+SLJC15G54 -KTGLBq/UQOWENlGRVczrtwDxe+oCD0uNGWZxjf0g58CiA7FURg3IIS4enfAChuNL -gYLz0+6zGfhTWyASHzef3KQ0dDZ33+EWM7T4A548rwjabPl1Et3HjsVoL6dR2g4Y -Go7DFdJv9h1QgLIE5y8HUv7qqQzp0ZN6AbTQQu52zymKJ/Du91o= -=6O04 +iQIzBAEBCAAdFiEEW1sboQ2FrHxcduOPLugqjZRwmD4FAmpx1wkACgkQLugqjZRw +mD4WChAAhwhWe7lajMURfjgZIjrHJwruy8puaUb/83HmGOmtHWnDl5abvC6WfSJP +QHLs2nm0+AEQQGJtsVa+WysVninLakDSQwFlSwWzzktpMifmeJbJJ06FF753P+H+ +kVrFuEsCyBuoF/zmmFIf5LzdQRzGyaLI8ch33e9XDrMNttSkw+GryJKyBU3cx+C3 +/Ee8uHidxCCG79LqFIjzmObFhQq2wHJJp7/yuxekdlMi94e87TTluf2XTn3zNy60 +lx8hM3sYUCZ4mRgUJz00Hkx9M4ARgy8xJEivjv6Q9PSH7Y9AYqXNu6zhqoAAMUtd +cXNHUan2VR0g0JiYGQ8Ums8yLAch1nLB8WMKeeTqdnjcXM4e7nQRs5TJyDQBGSsw +aLWHXhZ9GYk3Wp9F0eW+YB9EFGXN7m+dpQVfMqOPz0sAr7Arq7s5l0IZvEZPI5KQ +gO9wcT/sY39++MQ5gTTAM+FD8vgDSRw5OH2Bq1+rpgldK2rTi4877nR4MyT5FM9M +xMlY3IuBBpBIg2lMjXblbxKHGMDxOFA7esSUXD8r6VLc4bI3xpmTLvlpkxS/6xjG +X2n2sh9CMrsCFLBquJt0xhPbmQjYg27wywCpqk3eLZY1+7R0aKFgUj78DazB+nG4 +eUsR3VKgRGEUE+sw+T7IxfF6iDACkTs7UpMXgjfE4nSKF4/CyLI= +=EUrU -----END PGP SIGNATURE----- ++++++ django-6.0.7.tar.gz -> django-6.0.8.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Django/django-6.0.7.tar.gz /work/SRC/openSUSE:Factory/.python-Django.new.16738/django-6.0.8.tar.gz differ: char 5, line 1
