Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Django for openSUSE:Factory checked in at 2026-10-10 14:58:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Django (Old) and /work/SRC/openSUSE:Factory/.python-Django.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Django" Sat Oct 10 14:58:26 2026 rev:154 rq:1383712 version:6.1.2 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Django/python-Django.changes 2026-09-07 11:30:34.029599416 +0200 +++ /work/SRC/openSUSE:Factory/.python-Django.new.3698736/python-Django.changes 2026-10-10 14:59:05.001235882 +0200 @@ -1,0 +2,21 @@ +Fri Oct 9 09:08:40 UTC 2026 - Markéta Machová <[email protected]> + +- Update to 6.1.2 + * CVE-2026-77050: Potential denial-of-service vulnerability in + get_supported_language_variant() (bsc#1284481) + * CVE-2026-84429: Potential denial-of-service vulnerability in + HTTP header parsing (bsc#1284476) + * CVE-2026-87890: Potential request forgery via spatial lookup + byte values (bsc#1284472) + * CVE-2026-87975: Privilege abuse in model formsets with editable + primary keys (bsc#1284471) + * Fixed a class of bugs in Django 6.1 that allowed bypassing the + depth limiter for deeply nested geometry collections + (CVE-2026-15830). + * Fixed a data loss issue in Django 4.0 where network rasters + were deleted by GeoDjango when closed. + * Fixed an infinite loop in Django 5.2 in tuple lookups (e.g. + TupleIn) when an F() expression was used as the left-hand side + * Fixed many bugs and regressions in Django 6.1 + +------------------------------------------------------------------- Old: ---- Django-6.1.1.checksum.txt django-6.1.1.tar.gz New: ---- Django-6.1.2.checksum.txt django-6.1.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Django.spec ++++++ --- /var/tmp/diff_new_pack.mmIzH7/_old 2026-10-10 14:59:05.904273663 +0200 +++ /var/tmp/diff_new_pack.mmIzH7/_new 2026-10-10 14:59:05.905273705 +0200 @@ -27,7 +27,7 @@ %endif %define skip_python311 1 Name: python-Django -Version: 6.1.1 +Version: 6.1.2 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ django-6.1.1.tar.gz -> django-6.1.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Django/django-6.1.1.tar.gz /work/SRC/openSUSE:Factory/.python-Django.new.3698736/django-6.1.2.tar.gz differ: char 5, line 1
