Your message dated Wed, 04 Nov 2026 10:02:45 -0800
with message-id <[email protected]>
and subject line Re: trixie-pu: package python-django/3:4.2.28-0+deb13u3
has caused the Debian Bug report #1152391,
regarding trixie-pu: package python-django/3:4.2.28-0+deb13u3
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1152391: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1152391
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
Tags: trixie
User: [email protected]
Usertags: pu
Dear stable release managers,
Please consider python-django (3:4.2.28-0+deb13u3) for trixie:
python-django (3:4.2.28-0+deb13u3) trixie; urgency=medium
.
* Adjust the scaling factor in the test for CVE-2025-64460 added in
3:4.2.27-0+deb13u1 as it causes flakiness on loaded machines, and in
particular, on the runners for autopkgtests. (Closes: #1126323)
The full diff is attached. This is fixed in unstable.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
diff --git debian/changelog debian/changelog
index 96941a9dd..a568f65b6 100644
--- debian/changelog
+++ debian/changelog
@@ -1,3 +1,11 @@
+python-django (3:4.2.28-0+deb13u3) trixie; urgency=medium
+
+ * Adjust the scaling factor in the test for CVE-2025-64460 added in
+ 3:4.2.27-0+deb13u1 as it causes flakiness on loaded machines, and in
+ particular, on the runners for autopkgtests. (Closes: #1126323)
+
+ -- Chris Lamb <[email protected]> Tue, 27 Oct 2026 12:58:02 -0700
+
python-django (3:4.2.28-0+deb13u2) stable-proposed-updates; urgency=medium
* The fix for CVE-2025-6069 in the python3.13 source package (released
diff --git
debian/patches/0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch
debian/patches/0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch
new file mode 100644
index 000000000..ffbf1bfdc
--- /dev/null
+++
debian/patches/0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch
@@ -0,0 +1,22 @@
+From: Chris Lamb <[email protected]>
+Date: Tue, 27 Oct 2026 12:29:42 -0700
+Subject: Adjust the scaling factor in the test for CVE-2025-64460. (Closes:
+ #1126323)
+
+---
+ tests/serializers/test_deserialization.py | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/tests/serializers/test_deserialization.py
b/tests/serializers/test_deserialization.py
+index a718a990385a..383773986b23 100644
+--- a/tests/serializers/test_deserialization.py
++++ b/tests/serializers/test_deserialization.py
+@@ -184,6 +184,6 @@ class TestDeserializer(SimpleTestCase):
+ assertFactor(
+ "varying depth, varying length",
+ [(50, 2000), (100, 4000), (200, 8000), (400, 16000), (800,
32000)],
+- 2,
++ 4,
+ )
+- assertFactor("constant depth, varying length", [(100, 1), (100,
1000)], 2)
++ assertFactor("constant depth, varying length", [(100, 1), (100,
1000)], 4)
diff --git debian/patches/series debian/patches/series
index 936ff0a3f..39cb15728 100644
--- debian/patches/series
+++ debian/patches/series
@@ -4,3 +4,4 @@
0004-Set-the-default-shebang-to-new-projects-to-use-Pytho.patch
py313-test-help-default-options-with-custom-arguments.patch
0006-Workaround-changes-in-CVE-2025-6069.patch
+0007-Adjust-the-scaling-factor-in-the-test-for-CVE-2025-6.patch
--- End Message ---
--- Begin Message ---
Chris Lamb wrote:
> Please consider python-django (3:4.2.28-0+deb13u3) for trixie:
>
> python-django (3:4.2.28-0+deb13u3) trixie; urgency=medium
> .
> * Adjust the scaling factor in the test for CVE-2025-64460 added in
> 3:4.2.27-0+deb13u1 as it causes flakiness on loaded machines, and in
> particular, on the runners for autopkgtests. (Closes: #1126323)
In the meantime, there have been a number of new security issues for Django.
I will append the above change to them and upload via trixie-security
(instead of going via SPU). Closing this bug accordingly.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] 🍥 chris-lamb.co.uk
`-
--- End Message ---
