Hello community, here is the log from the commit of package python3-Django for openSUSE:Factory checked in at 2016-02-08 09:47:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python3-Django (Old) and /work/SRC/openSUSE:Factory/.python3-Django.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python3-Django" Changes: -------- --- /work/SRC/openSUSE:Factory/python3-Django/python3-Django.changes 2016-01-13 22:46:10.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.python3-Django.new/python3-Django.changes 2016-02-08 09:47:34.000000000 +0100 @@ -1,0 +2,82 @@ +Wed Feb 3 01:43:20 UTC 2016 - arun@gmx.de + +- updated to version 1.9.2: + * Security issue: User with "change" but not "add" permission can + create objects for ModelAdmin’s with save_as=True + + If a ModelAdmin uses save_as=True (not the default), the admin + provides an option when editing objects to "Save as new". A + regression in Django 1.9 prevented that form submission from + raising a "Permission Denied" error for users without the "add" + permission. + * Backwards incompatible change: .py-tpl files + rewritten in project/app templates + + The addition of some Django template language syntax to the + default app template in Django 1.9 means those files now have some + invalid Python syntax. This causes difficulties for packaging + systems that unconditionally byte-compile *.py files. + + To remedy this, a .py-tpl suffix is now used for the project and + app template files included in Django. The .py-tpl suffix is + replaced with .py by the startproject and startapp commands. For + example, a template with the filename manage.py-tpl will be + created as manage.py. + + Please file a ticket if you have a custom project template + containing .py-tpl files and find this behavior problematic. + Bugfixes + * Fixed a regression in ConditionalGetMiddleware causing + If-None-Match checks to always return HTTP 200 (#26024). + * Fixed a regression that caused the “user-tools” items to display + on the admin’s logout page (#26035). + * Fixed a crash in the translations system when the current language + has no translations (#26046). + * Fixed a regression that caused the incorrect day to be selected + when opening the admin calendar widget for timezones from GMT+0100 + to GMT+1200 (#24980). + * Fixed a regression in the admin’s edit related model popup that + caused an escaped value to be displayed in the select dropdown of + the parent window (#25997). + * Fixed a regression in 1.8.8 causing incorrect index handling in + migrations on PostgreSQL when adding db_index=True or unique=True + to a CharField or TextField that already had the other specified, + or when removing one of them from a field that had both, or when + adding unique=True to a field already listed in unique_together + (#26034). + * Fixed a regression where defining a relation on an abstract + model’s field using a string model name without an app_label no + longer resolved that reference to the abstract model’s app if + using that model in another application (#25858). + * Fixed a crash when destroying an existing test database on MySQL + or PostgreSQL (#26096). + * Fixed CSRF cookie check on POST requests when + USE_X_FORWARDED_PORT=True (#26094). + * Fixed a QuerySet.order_by() crash when ordering by a relational + field of a ManyToManyField through model (#26092). + * Fixed a regression that caused an exception when making database + queries on SQLite with more than 2000 parameters when DEBUG is + True on distributions that increase the SQLITE_MAX_VARIABLE_NUMBER + compile-time limit to over 2000, such as Debian (#26063). + * Fixed a crash when using a reverse OneToOneField in + ModelAdmin.readonly_fields (#26060). + * Fixed a crash when calling the migrate command in a test case with + the available_apps attribute pointing to an application with + migrations disabled using the MIGRATION_MODULES setting (#26135). + * Restored the ability for testing and debugging tools to determine + the template from which a node came from, even during template + inheritance or inclusion. Prior to Django 1.9, debugging tools + could access the template origin from the node via + Node.token.source[0]. This was an undocumented, private API. The + origin is now available directly on each node using the + Node.origin attribute (#25848). + * Fixed a regression in Django 1.8.5 that broke copying a + SimpleLazyObject with copy.copy() (#26122). + * Always included geometry_field in the GeoJSON serializer output + regardless of the fields parameter (#26138). + * Fixed the contrib.gis map widgets when using + USE_THOUSAND_SEPARATOR=True (#20415). + * Made invalid forms display the initial of values of their disabled + fields (#26129). + +------------------------------------------------------------------- Old: ---- Django-1.9.1.checksum.txt Django-1.9.1.tar.gz New: ---- Django-1.9.2.checksum.txt Django-1.9.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python3-Django.spec ++++++ --- /var/tmp/diff_new_pack.eMpSSu/_old 2016-02-08 09:47:35.000000000 +0100 +++ /var/tmp/diff_new_pack.eMpSSu/_new 2016-02-08 09:47:35.000000000 +0100 @@ -17,7 +17,7 @@ Name: python3-Django -Version: 1.9.1 +Version: 1.9.2 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ Django-1.9.1.checksum.txt -> Django-1.9.2.checksum.txt ++++++ --- /work/SRC/openSUSE:Factory/python3-Django/Django-1.9.1.checksum.txt 2016-01-13 22:46:09.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.python3-Django.new/Django-1.9.2.checksum.txt 2016-02-08 09:47:34.000000000 +0100 @@ -2,7 +2,7 @@ Hash: SHA256 This file contains MD5, SHA1, and SHA256 checksums for the source-code -tarball and wheel files of Django 1.9.1, released January 2, 2016. +tarball and wheel files of Django 1.9.2, released February 1, 2016. To use this file, you will need a working install of PGP or other compatible public-key encryption software. You will also need to have @@ -24,40 +24,40 @@ Release packages: ================= -https://www.djangoproject.com/m/releases/1.9/Django-1.9.1.tar.gz -https://www.djangoproject.com/m/releases/1.9/Django-1.9.1-py2.py3-none-any.w... +https://www.djangoproject.com/m/releases/1.9/Django-1.9.2.tar.gz +https://www.djangoproject.com/m/releases/1.9/Django-1.9.2-py2.py3-none-any.w... MD5 checksums: ============== -fe01a2b006be4a4f1b17b43b9ee3ba4e Django-1.9.1-py2.py3-none-any.whl -02754aa2d5c9c171dfc3f9422b20e12c Django-1.9.1.tar.gz +72317fd693fe1c95b6192d25d8fcd323 Django-1.9.2-py2.py3-none-any.whl +ee90280973d435a1a6aa01b453b50cd1 Django-1.9.2.tar.gz SHA1 checksums: =============== -c4c9b7bf5b402f4c483e36296925db6485443fc8 Django-1.9.1-py2.py3-none-any.whl -06457faee6998b922cb9c97a06116dd781618e07 Django-1.9.1.tar.gz +9fd1d27833f0fc3109b417922dbbe387abd7c724 Django-1.9.2-py2.py3-none-any.whl +3b761b2ba6a098572e39545251caef565bba3d5f Django-1.9.2.tar.gz SHA256 checksums: ================= -9f7ca04c6dbcf08b794f2ea5283c60156a37ebf2b8316d1027f594f34ff61101 Django-1.9.1-py2.py3-none-any.whl -a29aac46a686cade6da87ce7e7287d5d53cddabc41d777c6230a583c36244a18 Django-1.9.1.tar.gz +cc2ee91769af012654ae4904b6704f2fa0cc6b283675869c2f2ed879eaba11e8 Django-1.9.2-py2.py3-none-any.whl +7a233322eeb35da5fd8315f9e5dd48f2171de43ca2cfb11b138607daa4bf8a2f Django-1.9.2.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 -iQIcBAEBCAAGBQJWh9RFAAoJEB6Kvcdz7eJS2noP/3SvuRO+A2Cjy1YqDmOC1/x8 -K2rh5IF4llhmqcvyrmeX4+DUE+j6F/QYQIBI6Fp98ocTzhobYInShemZdYVbN3Yx -ff5ch/iQKzwEBKWcqYjKo0qfxs6tKq5BPuDUgj9OhucYxH70mC8qYLYd2nYg7cc/ -B8eSAsP00x7bEfafqwZ0hulGenmwv/YSzH+G/jQns2oJGqd1ZHqRgsYPCKbi+0Mm -qzLv7oqztB/Q6hIVQ8eenf1xgIlXTLQ/t+kHEPhtsJ3yCjVDhUwtd/KF3xGwFJAV -d9ASqlEfFkZagnhwtvxgwt2+X5k15S+IJL9I6wamvoKdkIsRcH8CTesuFtx/dPOo -UjCGHLpDE+wtZAHVxqYLl5mDcfd2pOIaPfHg0eFBxI9R9iXNH704xOFSsRNmT2Mu -7NLTmrkrnZ1D/rHNe0du0veRgPY1CAixlsoDb9BDp7SS1iamemVPuPakuqey5Xvc -tzQ0uo8m5Txg6nPp61On4VKhLLlZda0kmNnPyrti1xou/PiHkbzk9C9ogqWeVBtB -AtQt4Web0BllHMMO0qo8iI6x8UKK19pMXj06YN1P9deBQQ8jgUS4klNzP/HiB6X2 -GrRYO2ltIQ2foaItPKTrFpCzburYF+feQ9VpgzMM/CsOExK8tk7hV2ofwNZ7FzVy -dSw5AkJp4KUllY1S6u39 -=fWvf +iQIcBAEBCAAGBQJWr5GIAAoJEB6Kvcdz7eJSkIYP/1YkC2VfkucQJTQjERmCH1S4 +EadRBshFDkmrGQInwTJ/F35XVlAATGT75MvjIQpPlNoYIpRZXpEU7sqcICY7pmNO +Und1ShCtPUnPzUpE5GL7e2yEoJHGWUwfP73ro9+uQQDDDFD6oe29d4X8zNQEQZpU +fl59rAbXo/dGsJQiSPwZstf6+B6ciiIoBsS8fMXzXWUHmq0QpfbIWegmWNVe5qFj +Ot3glje/HGofzGzFbUa9WgaPFDA30COdbvzeP0zoj71C1FsMVXtvrl4avpPxYG70 +tvOwmSKu72CfrpSm1fRAFDYINB6W+1+0S7nLwvOmdSvKX9k1LUQ70mxwGVmaHMiB +XSA7R59bJYM61y08KI8PQN6bkaLv0nIBkQG/eRP41yY/XbVFQ4SkNCJVvG7JZPzs +Op/D+ev3ao2qP8V3l2PYmhWtMoFgNstDFBRHe5IwiTuGHfxq8SMGfWSwPO26p/kU +fwN3HLWFBx752THRF1TjFFnA2DU5FFdqUjVVQDZsEli+5hJO61mguEdgKAXQ2dHU +bXZyIXySyzWTMjmmw/P948Qc+d3K8rGgBcCUVk8MToe0/ljqAMlrL3eYA1q26QBS +T7fA3ja6ypMyeT9s7701zoLzQ4RSF9I8bl+4RnvSVwCutx/VrCJ2GKIssxo8qqT0 +xTN+usqGuNs3yAOfYEen +=HrIA -----END PGP SIGNATURE----- ++++++ Django-1.9.1.tar.gz -> Django-1.9.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/python3-Django/Django-1.9.1.tar.gz /work/SRC/openSUSE:Factory/.python3-Django.new/Django-1.9.2.tar.gz differ: char 5, line 1