Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Django5 for openSUSE:Factory checked in at 2026-08-09 21:40:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Django5 (Old) and /work/SRC/openSUSE:Factory/.python-Django5.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Django5" Sun Aug 9 21:40:56 2026 rev:2 rq:1370202 version:5.2.17 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Django5/python-Django5.changes 2026-07-14 13:48:26.671930873 +0200 +++ /work/SRC/openSUSE:Factory/.python-Django5.new.16738/python-Django5.changes 2026-08-09 21:40:59.073805776 +0200 @@ -1,0 +2,13 @@ +Wed Aug 5 12:09:37 UTC 2026 - Markéta Machová <[email protected]> + +- Update to 5.2.17 + * CVE-2026-15307: Server-side file-write and request forgery via + spatial lookups (bsc#1272997) + * CVE-2026-15337: Potential denial-of-service vulnerability in + check_for_language() (bsc#1272998) + * CVE-2026-15830: Potential denial-of-service vulnerability via + nested geometry collections (bsc#1272999) + * CVE-2026-15920: Potential cross-site scripting via URLField + values in the admin (bsc#1273000) + +------------------------------------------------------------------- Old: ---- Django-5.2.16.checksum.txt django-5.2.16.tar.gz New: ---- Django-5.2.17.checksum.txt django-5.2.17.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Django5.spec ++++++ --- /var/tmp/diff_new_pack.FOCQnC/_old 2026-08-09 21:41:02.117909779 +0200 +++ /var/tmp/diff_new_pack.FOCQnC/_new 2026-08-09 21:41:02.149910872 +0200 @@ -26,7 +26,7 @@ %bcond_with libalternatives %endif Name: python-Django5 -Version: 5.2.16 +Version: 5.2.17 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ Django-5.2.16.checksum.txt -> Django-5.2.17.checksum.txt ++++++ --- /work/SRC/openSUSE:Factory/python-Django5/Django-5.2.16.checksum.txt 2026-07-14 13:48:24.883870279 +0200 +++ /work/SRC/openSUSE:Factory/.python-Django5.new.16738/Django-5.2.17.checksum.txt 2026-08-09 21:40:58.097772430 +0200 @@ -2,7 +2,7 @@ Hash: SHA256 This file contains MD5, SHA1, and SHA256 checksums for the -source-code tarball and wheel files of Django 5.2.16, released July 7, 2026. +source-code tarball and wheel files of Django 5.2.17, released August 4, 2026. It also includes the commit hash of the release tag, identifying the exact source revision the artifacts were built from. @@ -10,14 +10,14 @@ To use this file, you will need a working install of PGP or other compatible public-key encryption software. You will also need to have the Django release manager's public key in your keyring. This key has -the ID ``131403F4D16D8DC7`` and can be imported from GitHub, for example, if +the ID ``2EE82A8D9470983E`` and can be imported from GitHub, for example, if using the open-source GNU Privacy Guard implementation of PGP: - curl https://github.com/jacobtylerwalls.gpg | gpg --import - + curl https://github.com/nessita.gpg | gpg --import - Once the key is imported, verify this file: - gpg --verify Django-5.2.16.checksum.txt + gpg --verify Django-5.2.17.checksum.txt Once you have verified this file, you can use normal MD5, SHA1, or SHA256 checksumming applications to generate the checksums of the Django @@ -26,44 +26,44 @@ Release packages ================ -https://www.djangoproject.com/download/5.2.16/tarball/ -https://www.djangoproject.com/download/5.2.16/wheel/ +https://www.djangoproject.com/download/5.2.17/tarball/ +https://www.djangoproject.com/download/5.2.17/wheel/ MD5 checksums ============= -0fa6df374d72417d9f44f324c35ad4df django-5.2.16.tar.gz -740c5363a2688f9eec17ce32db25a331 django-5.2.16-py3-none-any.whl +d3e9f9ca5c6d7d044a97675def960297 django-5.2.17.tar.gz +bc1b26968686a865a4d189bba287f3f3 django-5.2.17-py3-none-any.whl SHA1 checksums ============== -eaffb4974373d59955293e9e87a4052b7e14f55d django-5.2.16.tar.gz -cb7aa93cd8ced1dc61c1884008901b259e6efcec django-5.2.16-py3-none-any.whl +7c0ecfdec9fdd9c3dcc1e96be06dbd6841beee3b django-5.2.17.tar.gz +8158bea284b5020d71ddc2e617f5ab8331ed93ad django-5.2.17-py3-none-any.whl SHA256 checksums ================ -59ea02020c3136fce14bef0bbece21a10a4febef5eed1c51c22ae468efa22200 django-5.2.16.tar.gz -04f354bf9d807a86ad1a8392fe3808d362358a8eafc322848e0e43e59b24371d django-5.2.16-py3-none-any.whl +9d4d93be539a18ab80d058eb515900e10951e04c537c5a6b394fc49528d3251f django-5.2.17.tar.gz +f04fb3b36ee119e1af4fa1d397d5fd6cf12700f49321e84d4f4c642c5b1973db django-5.2.17-py3-none-any.whl Git tag ======= -The 5.2.16 tag points to commit 6c8eee41f778da87bdd17e27381d3705ed2d068b. +The 5.2.17 tag points to commit e802ada38b3ecf345915163bb6d7f008be411664. -----BEGIN PGP SIGNATURE----- -iQIzBAEBCAAdFiEEU9RpQuAGoqPu3IvIExQD9NFtjccFAmpM7SwACgkQExQD9NFt -jcdNYA/9FZqnpQsFOQLM+awgAMSqbzMYqCRyCj48GVhG60bp98aHi3mZg4vgb41t -0+x9xJgx7u8VHJQVZcDVSf0bY6zmmutHua3ICrNxrQngNEhaah0ssJlFlCkf6svc -aDUqFQJtX1Nbo415KOfJJt+E4Scoi4YiK+2fcojz2ymBsnufxWwYpmhBBJB9ND5m -QI7qaXdaDPTrU0l+7JJoHGEBxfsABu/hvykOxjSVmAlkrldI5dHeYwZEenlCHHhl -/gEF3WUBvKRE3Eb8LHGGmj6uhD3XgZvbwH98eXjiU8ENqYbtEkevCWA0QuR3QzF4 -VbQwzIKJ814ufu6l87oiJskNWnWPiOEV/2vExrHLgvs6S3Jxho8d68JB7aoqHb5a -gGD47JAHMjKCwlVIu79L5MyAZEcaj8SfBTboIqbm4SZTrIE7SF6VZPg5pJ9m1DMg -NRVmuoBVAZqt9pB0T/n1P0DehghortNGbebau9DHJX8Z0Dx+UN9/yT1wMSsn5oZD -YmYOtAPxreVHaCfLiYbvJ4UjoYvBlAQRlQMHkOYgr+NlNJq3/J/9gJUN+2sZuhLA -McsDejEQDE6Dm4UCi5qV5hD3T7Rz/6daQTZLINFNru4+R4HkGcMflvZ7tmZsAtpC -2MAFx5QJjEwGcFv/e3glZWgG28x4VJvWlzcY5MjBtb9SgNJFMX8= -=UJiz +iQIzBAEBCAAdFiEEW1sboQ2FrHxcduOPLugqjZRwmD4FAmpx160ACgkQLugqjZRw +mD7RZg/+OODFyTMGz/sKfzPC23kVeU+h9RyRSTjgulVtPuRVRl3SGbaspALaq6PK +OHxzP5Hs7Uf4GNqraZVPbQZ8QPgzmoYg7EYSR3eIe0RfqoBRIX3rhsa17+9OGUcw +JA0BCP11qzwtZ6mKcya+qC7bTtb5VYqWhAaDKt5oqHbpnfL6nE+UfR83NQwKgRED +qHTGBSantY0Bdt8LNt+w99umUiUw90pKivdYWo8JCAah535YxmUCvMki1lH9xF+h +rZUYg3uS8H8MGzXx5oL3Gcx3hBJ7hJFcYiwkn50iYhXC6zOCOMugFlylkTqzl/Rv +tHya4lCPYht5ht8sJ20Hb/BSXTyVDkMofxfVS3glg3DSm5LJXW6Vhx5Bn3ERig1q +bXK21kzVlA9st4jkonh/zo/0b9AGtyQffnfghktAQZCKf8yYcg+mXzZaxhaPQdrz +GDfzXE0ki9c7Nmgn6adZTKTm9D9pxOe6lfZTBgpkTCTkHGjOMe4ZRuLMOcurD7b3 +TgKQTOc9UlrFtI8ZuENpXB36zF/mAkttELBCNuA0nB54lCL7L6p+9BwdZ4zJ7fMN +6SEvCEGJPn18j1plMkVDHxiXeDrBBpDLP30H2ad7gWmF1RpqRFM96Bb23JRo2kYB +Ir/allSOKu7wYh8hvMl22/2HSG+PattB74vd64yQgiElnxBZWHE= +=eYRb -----END PGP SIGNATURE----- ++++++ django-5.2.16.tar.gz -> django-5.2.17.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Django5/django-5.2.16.tar.gz /work/SRC/openSUSE:Factory/.python-Django5.new.16738/django-5.2.17.tar.gz differ: char 5, line 1
