diff options
| author | Hugo Buddelmeijer <hugo@buddelmeijer.nl> | 2025-12-06 19:19:53 +0100 |
|---|---|---|
| committer | Rutherther <rutherther@ditigal.xyz> | 2026-01-25 21:17:28 +0100 |
| commit | fb3a094ae7138253aaa3df3a00606b1a94d7eced (patch) | |
| tree | b733fe6d21a304b96f9e18dac3576e1657226512 /gnu/packages | |
| parent | 12c86daece2bcca52b9557bd1742666871b76bed (diff) | |
gnu: python-django: Update to 5.2.9 to fix CVEs.
Fixes CVE-2025-32873, CVE-2025-13372, and CVE-2025-64460.
* gnu/packages/django.scm (python-django): Update to 5.2.9.
[properties]: Hide CVE-2025-32873 and unhide CVE-2023-31047.
Change-Id: I75769bbfd36ccba8456b38154db69989f73b62eb
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Rutherther <rutherther@ditigal.xyz>
Diffstat (limited to 'gnu/packages')
| -rw-r--r-- | gnu/packages/django.scm | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/gnu/packages/django.scm b/gnu/packages/django.scm index e678aaf072a..ed994187233 100644 --- a/gnu/packages/django.scm +++ b/gnu/packages/django.scm | |||
| @@ -203,13 +203,13 @@ your project into different processes.") | |||
| 203 | (define-public python-django | 203 | (define-public python-django |
| 204 | (package | 204 | (package |
| 205 | (name "python-django") | 205 | (name "python-django") |
| 206 | (version "5.2.8") | 206 | (version "5.2.9") |
| 207 | (source | 207 | (source |
| 208 | (origin | 208 | (origin |
| 209 | (method url-fetch) | 209 | (method url-fetch) |
| 210 | (uri (pypi-uri "django" version)) | 210 | (uri (pypi-uri "django" version)) |
| 211 | (sha256 | 211 | (sha256 |
| 212 | (base32 "0zvc8p4brwbj4yy8jxcannjfnik2xh4vis04c3x2r6mvlmk4h993")))) | 212 | (base32 "15d45imlysz7wcm4azf6a9rjv19jxb953x8sav0fc9wcbvycrd8n")))) |
| 213 | (build-system pyproject-build-system) | 213 | (build-system pyproject-build-system) |
| 214 | (arguments | 214 | (arguments |
| 215 | '(#:test-flags | 215 | '(#:test-flags |
| @@ -295,8 +295,8 @@ any Web site. Django focuses on automating as much as possible and adhering | |||
| 295 | to the @dfn{don't repeat yourself} (DRY) principle.") | 295 | to the @dfn{don't repeat yourself} (DRY) principle.") |
| 296 | (license license:bsd-3) | 296 | (license license:bsd-3) |
| 297 | (properties `((cpe-name . "django") | 297 | (properties `((cpe-name . "django") |
| 298 | ;; This CVE seems fixed since 4.2.1. | 298 | ;; This CVE seems fixed since 5.2.1. |
| 299 | (lint-hidden-cve . ("CVE-2023-31047")))))) | 299 | (lint-hidden-cve . ("CVE-2025-32873")))))) |
| 300 | 300 | ||
| 301 | (define-public python-django-4 | 301 | (define-public python-django-4 |
| 302 | (package | 302 | (package |
