Package: release.debian.org
Severity: normal
Tags: trixie
User: [email protected]
Usertags: pu

Dear stable release managers,

Please consider python-django (3:4.2.28-0+deb13u3) for trixie:
  
  python-django (3:4.2.28-0+deb13u3) trixie; urgency=medium
  .
    * Adjust the scaling factor in the test for CVE-2025-64460 added in
      3:4.2.27-0+deb13u1 as it causes flakiness on loaded machines, and in
      particular, on the runners for autopkgtests. (Closes: #1126323)


The full diff is attached. This is fixed in unstable.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      [email protected] / chris-lamb.co.uk
       `-
diff --git debian/changelog debian/changelog
index 96941a9dd..a568f65b6 100644
--- debian/changelog
+++ debian/changelog
@@ -1,3 +1,11 @@
+python-django (3:4.2.28-0+deb13u3) trixie; urgency=medium
+
+  * Adjust the scaling factor in the test for CVE-2025-64460 added in
+    3:4.2.27-0+deb13u1 as it causes flakiness on loaded machines, and in
+    particular, on the runners for autopkgtests. (Closes: #1126323)
+
+ -- Chris Lamb <[email protected]>  Tue, 27 Oct 2026 12:58:02 -0700
+
 python-django (3:4.2.28-0+deb13u2) stable-proposed-updates; urgency=medium
 
   * The fix for CVE-2025-6069 in the python3.13 source package (released
diff --git 
debian/patches/0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch 
debian/patches/0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch
new file mode 100644
index 000000000..ffbf1bfdc
--- /dev/null
+++ 
debian/patches/0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch
@@ -0,0 +1,22 @@
+From: Chris Lamb <[email protected]>
+Date: Tue, 27 Oct 2026 12:29:42 -0700
+Subject: Adjust the scaling factor in the test for CVE-2025-64460. (Closes:
+ #1126323)
+
+---
+ tests/serializers/test_deserialization.py | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/tests/serializers/test_deserialization.py 
b/tests/serializers/test_deserialization.py
+index a718a990385a..383773986b23 100644
+--- a/tests/serializers/test_deserialization.py
++++ b/tests/serializers/test_deserialization.py
+@@ -184,6 +184,6 @@ class TestDeserializer(SimpleTestCase):
+         assertFactor(
+             "varying depth, varying length",
+             [(50, 2000), (100, 4000), (200, 8000), (400, 16000), (800, 
32000)],
+-            2,
++            4,
+         )
+-        assertFactor("constant depth, varying length", [(100, 1), (100, 
1000)], 2)
++        assertFactor("constant depth, varying length", [(100, 1), (100, 
1000)], 4)
diff --git debian/patches/series debian/patches/series
index 936ff0a3f..39cb15728 100644
--- debian/patches/series
+++ debian/patches/series
@@ -4,3 +4,4 @@
 0004-Set-the-default-shebang-to-new-projects-to-use-Pytho.patch
 py313-test-help-default-options-with-custom-arguments.patch
 0006-Workaround-changes-in-CVE-2025-6069.patch
+0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch

Reply via email to