kumquat-buildroot/package/python-django/python-django.mk
Peter Korsgaard 5b5d3befef package/python-django: security bump to version 4.0.8
Fixes the following security issues:

- CVE-2022-36359: Potential reflected file download vulnerability in
  FileResponse (4.0.7)
  https://www.djangoproject.com/weblog/2022/aug/03/security-releases/

- CVE-2022-41323: Potential denial-of-service vulnerability in
  internationalized URLs (4.0.8)
  https://www.djangoproject.com/weblog/2022/oct/04/security-releases/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-17 22:37:25 +02:00

19 lines
676 B
Makefile

################################################################################
#
# python-django
#
################################################################################
PYTHON_DJANGO_VERSION = 4.0.8
PYTHON_DJANGO_SOURCE = Django-$(PYTHON_DJANGO_VERSION).tar.gz
# The official Django site has an unpractical URL
PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/1a/de/08d8a349ed0e3e1999eb86ae0347cc9eaf634cd65f1eb80b9387ac1dbe3c
PYTHON_DJANGO_LICENSE = BSD-3-Clause
PYTHON_DJANGO_LICENSE_FILES = LICENSE
PYTHON_DJANGO_CPE_ID_VENDOR = djangoproject
PYTHON_DJANGO_CPE_ID_PRODUCT = django
PYTHON_DJANGO_SETUP_TYPE = setuptools
$(eval $(python-package))