Package python-module-django: Information

  • Default inline alert: Version in the repository: 1.11.29-alt2

Source package: python-module-django
Version: 1.11.23-alt1
Build time:  Aug 5, 2019, 08:32 PM in the task #235518
Report package bug
License: BSD
Summary: A high-level Python Web framework that encourages rapid development and clean, pragmatic design.
Description: 
A high-level Python Web framework that encourages rapid development and clean, pragmatic design.

List of rpms provided by this srpm:
python-module-django (noarch)
python-module-django-dbbackend-mysql (noarch)
python-module-django-dbbackend-psycopg2 (noarch)
python-module-django-dbbackend-sqlite3 (noarch)
python-module-django-doc (noarch)
python-module-django-tests (noarch)
python3-module-django (noarch)
python3-module-django-dbbackend-mysql (noarch)
python3-module-django-dbbackend-psycopg2 (noarch)
python3-module-django-dbbackend-sqlite3 (noarch)
python3-module-django-tests (noarch)

Maintainer: Alexey Shabalin


    1. python3-module-html5lib
    2. python3-module-pbr
    3. python3-module-setuptools
    4. python3-module-six
    5. python3-module-unittest2
    6. python3-modules-sqlite3
    7. rpm-build-python >= 0.8
    8. rpm-build-python3
    9. python-devel = 2.7
    10. rpm-build-python3
    11. python-module-mock
    12. python-module-setuptools
    13. python-module-six
    14. python-modules-sqlite3
    15. python-modules-wsgiref

Last changed


Aug. 5, 2019 Alexey Shabalin 1.11.23-alt1
- 1.11.23
- Fixes for the following security vulnerabilities:
  + CVE-2019-14232 Adjusted regex to avoid backtracking issues when truncating HTML
  + CVE-2019-14233 Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities
  + CVE-2019-14234 Protected JSONField/HStoreField key and index lookups against SQL injection
  + CVE-2019-14235 Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri()
July 16, 2019 Alexey Shabalin 1.11.22-alt2
- revert rename package to python-module-django1.11
July 15, 2019 Alexey Shabalin 1.11.22-alt1
- 1.11.22
- rename package to python-module-django1.11
- Fixes for the following security vulnerabilities:
  + CVE-2019-12781 Incorrect HTTP detection with reverse-proxy connecting via HTTPS
  + CVE-2019-12308 AdminURLFieldWidget XSS
  + CVE-2019-6975 Memory exhaustion in django.utils.numberformat.format()
  + CVE-2019-3498 Content spoofing possibility in the default 404 page