Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-Django5 for openSUSE:Factory
checked in at 2026-11-10 14:39:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-Django5 (Old)
and /work/SRC/openSUSE:Factory/.python-Django5.new.3759290 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Django5"
Tue Nov 10 14:39:17 2026 rev:5 rq:1396360 version:5.2.19
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-Django5/python-Django5.changes
2026-10-09 21:46:53.042106780 +0200
+++
/work/SRC/openSUSE:Factory/.python-Django5.new.3759290/python-Django5.changes
2026-11-10 14:39:54.147264738 +0100
@@ -1,0 +2,15 @@
+Mon Nov 9 13:40:15 UTC 2026 - Markéta Machová <[email protected]>
+
+- Update to 5.2.19
+ * CVE-2026-108147: Potential memory exhaustion in MultiPartParser
+ via base64-encoded file upload (bsc#1289340)
+ * CVE-2026-111211: Potential log injection via unescaped geometry
+ form values (bsc#1289344)
+ * CVE-2026-111362: Server-side request forgery via crs member of
+ GeoJSON geometries (bsc#1289345)
+ * CVE-2026-113593: Potential exposure of private data via empty
+ and missing Vary headers (bsc#1289348)
+ * CVE-2026-114582: Server-side request forgery via SpatialReference
+ string input (bsc#1289350)
+
+-------------------------------------------------------------------
Old:
----
Django-5.2.18.checksum.txt
django-5.2.18.tar.gz
New:
----
Django-5.2.19.checksum.txt
django-5.2.19.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-Django5.spec ++++++
--- /var/tmp/diff_new_pack.dQ7IUY/_old 2026-11-10 14:39:55.331314293 +0100
+++ /var/tmp/diff_new_pack.dQ7IUY/_new 2026-11-10 14:39:55.332314335 +0100
@@ -26,7 +26,7 @@
%bcond_with libalternatives
%endif
Name: python-Django5
-Version: 5.2.18
+Version: 5.2.19
Release: 0
Summary: A high-level Python Web framework
License: BSD-3-Clause
++++++ django-5.2.18.tar.gz -> django-5.2.19.tar.gz ++++++
/work/SRC/openSUSE:Factory/python-Django5/django-5.2.18.tar.gz
/work/SRC/openSUSE:Factory/.python-Django5.new.3759290/django-5.2.19.tar.gz
differ: char 5, line 1
