* boo#1172167 -  CVE-2020-13596: Possible XSS via admin

• Files Changed
• Browse Source

- update to 3.0.7
- drop 32bit.patch
 *  boo#1172167 - CVE-2020-13254: Potential data leakage via malformed
      memcached keys
 * boo#1172164 -  CVE-2020-13596: Possible XSS via admin
      ForeignKeyRawIdWidget
 * many other bugfixes

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add patch to fix the 32bit build:
  * 32bit.patch

• Files Changed
• Browse Source

- Update to 3.0.5 
  https://docs.djangoproject.com/en/3.0/releases/3.0.5/
  https://docs.djangoproject.com/en/3.0/releases/3.0.4/
  https://docs.djangoproject.com/en/3.0/releases/3.0.3/
  https://docs.djangoproject.com/en/3.0/releases/3.0.2/
  https://docs.djangoproject.com/en/3.0/releases/3.0.1/
  https://docs.djangoproject.com/en/3.0/releases/3.0/
- new dependency: python-asgiref

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to 2.2.12:
  * Added the ability to handle .po files containing different plural
    equations for the same language (#30439).

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 2.2.11
 * fix boo#1165022 (CVE-2020-9402) Potential SQL injection via tolerance
   parameter in GIS functions and aggregates on Oracle
 * fix boo#1161919 (CVE-2020-7471) Potential SQL injection via ``StringAgg(delimiter)``

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- add sqlite330.patch - fix sqlite 3.30 support

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- add pyyaml53.patch - fix tests with PyYAML 5.3

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

 * CVE-2019-19844: Potential account hijack via password reset form (bsc#1159447)

• Files Changed
• Browse Source

- Update to 2.2.9
 * CVE-2019--19844: Potential account hijack via password reset form (bsc#1156447)
 * Fixed a data loss possibility in SplitArrayField.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to 2.2.8
  * CVE-2019-19118: Privilege escalation in the Django admin (boo#1157705)
  * Fixed a data loss possibility in the admin changelist view when a
    custom formset’s prefix contains regular expression special
    characters, e.g. '$'
  * Fixed a regression in Django 2.2.1 that caused a crash when
    migrating permissions for proxy models with a multiple database
    setup if the default entry was empty
  * Fixed a data loss possibility in the select_for_update(). When
    using 'self' in the of argument with multi-table inheritance, a
    parent model was locked instead of the queryset’s model
- Add patch fix-selenium-test.patch to fix a test when selenium is
  missing

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to 2.2.7:
  * Fixed a crash when using a contains, contained_by, has_key, has_keys, or has_any_keys lookup on JSONField, if the right or left hand side of an expression is a key transform (#30826).
  * Prevented migrate --plan from showing that RunPython operations are irreversible when reverse_code callables don’t have docstrings or when showing a forward migration plan (#30870).
  * Fixed migrations crash on PostgreSQL when adding an Index with fields ordering and opclasses (#30903).
  * Restored the ability to override get_FOO_display() (#30931).

• Files Changed
• Browse Source