Hello community, here is the log from the commit of package python3-Django for openSUSE:Factory checked in at 2015-08-27 08:55:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python3-Django (Old) and /work/SRC/openSUSE:Factory/.python3-Django.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python3-Django" Changes: -------- --- /work/SRC/openSUSE:Factory/python3-Django/python3-Django.changes 2015-08-05 06:49:43.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python3-Django.new/python3-Django.changes 2015-08-27 08:55:53.000000000 +0200 @@ -1,0 +2,35 @@ +Sun Aug 23 00:19:59 UTC 2015 - a...@gmx.de + +- update to version 1.8.4: + * Denial-of-service possibility in logout() view by filling session + store + + Previously, a session could be created when anonymously accessing + the django.contrib.auth.views.logout() view (provided it wasn’t + decorated with login_required() as done in the admin). This could + allow an attacker to easily create many new session records by + sending repeated requests, potentially filling up the session + store or causing other users’ session records to be evicted. + + The SessionMiddleware has been modified to no longer create empty + session records. + * Bugfixes + + Added the ability to serialize values from the newly added + UUIDField (#25019). + + Added a system check warning if the old TEMPLATE_* settings are + defined in addition to the new TEMPLATES setting. + + Fixed QuerySet.raw() so InvalidQuery is not raised when using the + db_column name of a ForeignKey field with primary_key=True + (#12768). + + Prevented an exception in TestCase.setUpTestData() from leaking + the transaction (#25176). + + Fixed has_changed() method in contrib.postgres.forms.HStoreField + (#25215, #25233). + + Fixed the recording of squashed migrations when running the + migrate command (#25231). + + Moved the unsaved model instance assignment data loss check to + Model.save() to allow easier usage of in-memory models (#25160). + + Prevented varchar_patterns_ops and text_patterns_ops indexes for + ArrayField (#25180). + +------------------------------------------------------------------- Old: ---- Django-1.8.3.checksum.txt Django-1.8.3.tar.gz New: ---- Django-1.8.4.checksum.txt Django-1.8.4.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python3-Django.spec ++++++ --- /var/tmp/diff_new_pack.9SP9e2/_old 2015-08-27 08:55:54.000000000 +0200 +++ /var/tmp/diff_new_pack.9SP9e2/_new 2015-08-27 08:55:54.000000000 +0200 @@ -17,7 +17,7 @@ Name: python3-Django -Version: 1.8.3 +Version: 1.8.4 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ Django-1.8.3.checksum.txt -> Django-1.8.4.checksum.txt ++++++ --- /work/SRC/openSUSE:Factory/python3-Django/Django-1.8.3.checksum.txt 2015-08-05 06:49:43.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python3-Django.new/Django-1.8.4.checksum.txt 2015-08-27 08:55:52.000000000 +0200 @@ -2,7 +2,7 @@ Hash: SHA256 This file contains MD5, SHA1, and SHA256 checksums for the source-code -tarball and wheel files of Django 1.8.3, released July 8, 2015. +tarball and wheel files of Django 1.8.4, released August 18, 2015. To use this file, you will need a working install of PGP or other compatible public-key encryption software. You will also need to have @@ -24,40 +24,40 @@ Release packages: ================= -https://www.djangoproject.com/m/releases/1.8/Django-1.8.3.tar.gz -https://www.djangoproject.com/m/releases/1.8/Django-1.8.3-py2.py3-none-any.whl +https://www.djangoproject.com/m/releases/1.8/Django-1.8.4.tar.gz +https://www.djangoproject.com/m/releases/1.8/Django-1.8.4-py2.py3-none-any.whl MD5 checksums: ============== -a5d397c65a880228c58a443070cc18a8 Django-1.8.3-py2.py3-none-any.whl -31760322115c3ae51fbd8ac85c9ac428 Django-1.8.3.tar.gz +3a586ed7da0715ea65ec94a9b1ff2d87 Django-1.8.4-py2.py3-none-any.whl +8eb569a5b9d984d9f3366fda67fb0bb8 Django-1.8.4.tar.gz SHA1 checksums: =============== -9efb71612ab8e4fd948c564bcd574afa29127d71 Django-1.8.3-py2.py3-none-any.whl -229dae14aa42169e2e2a6ecb1e00e75f0d57ed35 Django-1.8.3.tar.gz +e16b56820c0c3603ae22cbdffbc11e24f526fdec Django-1.8.4-py2.py3-none-any.whl +6399d89b84a09e70c0cdadb10b558172c3e182e3 Django-1.8.4.tar.gz SHA256 checksums: ================= -047d0f4c93262b33801049a2dcddaef09c29e741c03a947a3556ea4748eed2e2 Django-1.8.3-py2.py3-none-any.whl -2bb654fcc05fd53017c88caf2bc38b5c5ea23c91f8ac7f0a28b290daf2305bba Django-1.8.3.tar.gz +2376c3d8c5f495b302b112d7232c84761130c430e1840c05a2a02b28f17dd596 Django-1.8.4-py2.py3-none-any.whl +826996c81e1cc773500124d5c19212e4a7681a55ee169fab9085f2b3015a70d8 Django-1.8.4.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 -iQIcBAEBCAAGBQJVnXs7AAoJEB6Kvcdz7eJSTFUQAJrkhj7RvqFoRpWw3rYhgjfO -75j8gNxXEZ0EhoiSObU6MEg1TYPmkbGmX9IZC2w7vSW03MrSwon1HrC+eC1fp8vQ -wWA5PKGkkJvXqnBltraFY/Az1WWQtxWB1MpKLgZJd9lyYuutLQTxN2W62nPhl9JR -HKSzhr1gsILGOua0U9nuTum7BH2T0WY/oqwPnKEKfFksQNa1d+HGZtRVOPo36kDl -s6iMUfXdNkS/7rNGhK83HZFbnz57Gdk1J1P+fSCL5aOHgU5wiWL27tL3Vy3g4NWe -OKBzzFf2vqKSlVS6KCsG1uRPQgb7agwGzbbBgkUOfDeOd6UTjoh9xLJhMjhq8atP -3Cmd0cDQsyitDkQhiZd4QH6sKb8RsvgWK3lH6+oYNH7UgjcZemT7vOJosNktJayk -dh7TvRf17jguUE+ZkfqM+yxDi/G1iAo9jBkm5ltnUPut20zE/Bw7j+YPJSPjoW7X -H8QEswM+WsrQ8MyVF2iHE0f5qPE/ms4ETcNNm7Bbjbs+LRNeinWezy1sJZWzGTXf -fV3MLnXtKw34962lLH4aiXqEqJumXX3chjxk+dVvD4B84+khEnnzwsqGdrs8H/Hk -9BZxDcMUvVUCwK8hRblI+b1aIj/unF5wP8AZ9zcCIHk1LSQylXp1If4T2vdjkEma -d8LtHNYKtgbEbkGyws2V -=vwa4 +iQIcBAEBCAAGBQJV02PDAAoJEB6Kvcdz7eJSD4QP/iYexYCPcZIu2ufa6mz76hHl +wXc8fhGDpDms0SWBzMtZDVoE5SEyLqyvMYeLBcB/l5eoSOch7XOWniODPH+P9Wi/ +Cm6uf+2kgv9/BipwHcfkEIzgJeYIzi/7rBw+QgJoO2xfMaE9R9HDA2cVYSlZnYoh +U1ZcMObHGxXMNKNDxB+C3YlBmpOTGroRDkR457/UP9CxiCVmcknqUCNMUSIpoLfo +Qost/M2jfwBCpZzxzznKIqk0FoJc6cmf5E/k308GNnp9qghklUWxyaJBQv5Ehmrw +Vo38ZIzFVboquYd0VuVMmxzj6ZawLR2w2aGxvVRozOwHL3b0Oq0AnhR+A4dJQZEQ +hLGZH8cJ0iHBPitYC/KdM8V4pOYLYbBOqNfzFa+wDlKlyT8+kpHyrDcrdhCAAHba +DL/q3iAkxTUTc9rpc+PR1vnFTyzkPFT5V1egotlG6fybUCdqxhEGeR/8bngIvrri +LYIOKz6DXmjlySUj/uA5ruSxeqsxU9iLVZf39BlLEXCH/F2HoUqhzw8vaANnzGXH +99fELKaopGUKyuDVSQUnq6SecuVfqSOps+3CpmsdJRt+VUOZhChFg+s6VR8Ht2Jy +2UxqGEaEodZ/8RuJ+qcb+QRCvTnS8Lpfz01haPp1Mf7dRvC3JeHy3KennF+Y37Qu +Q/JnxKNoLsiXFwZ+gFtN +=oove -----END PGP SIGNATURE----- ++++++ Django-1.8.3.tar.gz -> Django-1.8.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/python3-Django/Django-1.8.3.tar.gz /work/SRC/openSUSE:Factory/.python3-Django.new/Django-1.8.4.tar.gz differ: char 5, line 1
