Hello community, here is the log from the commit of package python-Django for openSUSE:Factory checked in at 2019-12-30 12:34:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Django (Old) and /work/SRC/openSUSE:Factory/.python-Django.new.6675 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-Django" Mon Dec 30 12:34:14 2019 rev:59 rq:759885 version:2.2.9 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Django/python-Django.changes 2019-12-07 15:12:25.495821022 +0100 +++ /work/SRC/openSUSE:Factory/.python-Django.new.6675/python-Django.changes 2019-12-30 12:34:24.263790786 +0100 @@ -1,0 +2,7 @@ +Sun Dec 29 11:00:47 UTC 2019 - Ondřej Súkup <mimi.vx@gmail.com> + +- Update to 2.2.9 + * CVE-2019-19844: Potential account hijack via password reset form (bsc#1159447) + * Fixed a data loss possibility in SplitArrayField. + +------------------------------------------------------------------- Old: ---- Django-2.2.8.tar.gz Django-2.2.8.tar.gz.asc New: ---- Django-2.2.9.tar.gz Django-2.2.9.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Django.spec ++++++ --- /var/tmp/diff_new_pack.r51W3n/_old 2019-12-30 12:34:25.299791342 +0100 +++ /var/tmp/diff_new_pack.r51W3n/_new 2019-12-30 12:34:25.299791342 +0100 @@ -22,8 +22,8 @@ %bcond_with selenium %bcond_with memcached Name: python-Django -# We want support LTS versions of Django - odd numbered 2.2 -> 2.4 -> 2.6 -> 3.0 etc -Version: 2.2.8 +# We want support LTS versions of Django - numbered 2.2 -> 3.2 -> 4.2 etc +Version: 2.2.9 Release: 0 Summary: A high-level Python Web framework License: BSD-3-Clause ++++++ Django-2.2.8.tar.gz -> Django-2.2.9.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Django/Django-2.2.8.tar.gz /work/SRC/openSUSE:Factory/.python-Django.new.6675/Django-2.2.9.tar.gz differ: char 5, line 1 ++++++ Django-2.2.8.tar.gz.asc -> Django-2.2.9.tar.gz.asc ++++++ --- /work/SRC/openSUSE:Factory/python-Django/Django-2.2.8.tar.gz.asc 2019-12-07 15:12:25.139821071 +0100 +++ /work/SRC/openSUSE:Factory/.python-Django.new.6675/Django-2.2.9.tar.gz.asc 2019-12-30 12:34:24.011790651 +0100 @@ -2,16 +2,16 @@ Hash: SHA256 This file contains MD5, SHA1, and SHA256 checksums for the source-code -tarball and wheel files of Django 2.2.8, released December 2, 2019. +tarball and wheel files of Django 2.2.9, released December 18, 2019. To use this file, you will need a working install of PGP or other compatible public-key encryption software. You will also need to have the Django release manager's public key in your keyring; this key has -the ID ``E17DF5C82B4F9D00`` and can be imported from the MIT +the ID ``2EF56372BA48CD1B`` and can be imported from the MIT keyserver. For example, if using the open-source GNU Privacy Guard implementation of PGP: - gpg --keyserver pgp.mit.edu --recv-key E17DF5C82B4F9D00 + gpg --keyserver pgp.mit.edu --recv-key 2EF56372BA48CD1B Once the key is imported, verify this file:: @@ -24,39 +24,40 @@ Release packages: ================= -https://www.djangoproject.com/m/releases/2.2/Django-2.2.8-py3-none-any.whl -https://www.djangoproject.com/m/releases/2.2/Django-2.2.8.tar.gz +https://www.djangoproject.com/m/releases/2.2/Django-2.2.9-py3-none-any.whl +https://www.djangoproject.com/m/releases/2.2/Django-2.2.9.tar.gz MD5 checksums ============= -2dd61e8dfadc3754e35f927d4142fc0f Django-2.2.8-py3-none-any.whl -57d965818410a4e00e2267eef66aa9c9 Django-2.2.8.tar.gz +2bdad7b5e9a0012f916b14f68df8084b Django-2.2.9-py3-none-any.whl +a9a6555d166196e502b69715341f7ad4 Django-2.2.9.tar.gz SHA1 checksums ============== -ad9d4b417d4b99ec19548d7339b345d807de5000 Django-2.2.8-py3-none-any.whl -0a631fe2237fea6a60cdd5d02b618632b6e49a1b Django-2.2.8.tar.gz +3257a5f8bf77896b6e883162282c256c59977aa4 Django-2.2.9-py3-none-any.whl +c5a1c4bec360b4e98e839fcf6088b8eb1599c1ed Django-2.2.9.tar.gz SHA256 checksums ================ -fa98ec9cc9bf5d72a08ebf3654a9452e761fbb8566e3f80de199cbc15477e891 Django-2.2.8-py3-none-any.whl -a4ad4f6f9c6a4b7af7e2deec8d0cbff28501852e5010d6c2dc695d3d1fae7ca0 Django-2.2.8.tar.gz +687c37153486cf26c3fdcbdd177ef16de38dc3463f094b5f9c9955d91f277b14 Django-2.2.9-py3-none-any.whl +662a1ff78792e3fd77f16f71b1f31149489434de4b62a74895bd5d6534e635a5 Django-2.2.9.tar.gz -----BEGIN PGP SIGNATURE----- -iQIzBAEBCAAdFiEE/l+2OHah1xioxnVW4X31yCtPnQAFAl3ky/QACgkQ4X31yCtP -nQBi8w//S+ZVGHyo35gekAy3j11PmUuiD2nhGlrmfZgiBsAepcxIpXH/ZYS+OWUY -ZYdyUYb9308YGiKzkOxOMmsqrZeEwzImQcf844MCbQcFkPe0NWc9FZ/RphCaStVN -pxoGHZOfV6bOyLVJO8jV4YqDl/MBWdvtFDMhrrJlZSmgmVDAfpSV+BFUmoFaiC2i -vd1fKKVLxTVZrr6L6ov0h8JM2gMPVoGp4P/WDofk1LuWRKLZmwtrp7PRdBeyf5jO -itoQD00qAt2IsdaXYuPkaCMdQWzCJDGiFFUjcRkzdZtLaKugTnuHMol9/lCcXkW1 -NL//xq+rh8YfyTkNk4rDHuu98urPz46z1kgvNOSJlgpTf4RWjk/va1s+/Cc28QSa -KVA4CcD+2+we781USYJG0B10+OsgzWbPV+50IOejVqrhj5QCSa6LRG37hp6iJThp -+2ZqM8DthouFdjliT1W3pEzcyII/nWqIibyWo7zMrQQk5N9f5E628KHIFlOeB7+8 -pinSTmfUpTS5leVBRIzc2LhdE9WYoPaFdQOm2AD7vHDIwYxy5l9uStyN25xi+Jp1 -EvsFmIKj9COc21L4nDujpgKdLJ0eiGAL6fJ6UQydvMaBsdbPXO8kTk/lXooQx1X/ -LhbnxqLG1Yzh9bxNHCGOGPDnWswGeTFNpAhRwtryCBASeItQzAE= -=xo2Q +iQJPBAEBCAA5FiEEq7LCqM0B8WE2GLcNLvVjcrpIzRsFAl3543QbHGZlbGlzaWFr +Lm1hcml1c3pAZ21haWwuY29tAAoJEC71Y3K6SM0bzHsP/3EjnNZi5CZYQLLiay1P +4QIhHdl0Qqu5ocugQVngnBIu9/Lsn7QlCiQBE+M83HsUz03s6IEEIJ1t0wDpQFph +PGEe3YbUk8U5VK0aEuDrc1Shi+mYmFnvA0Cj9+6TeFj8jVqTZH1olqJ7OwWBahXr +6WPyU0R21VFjTAbgnw3iNT8sgnDm+pZBjXmmKScsXzDEcM6lnZd2ZcXg78cUKPPU +VC32noVdiCh3HZnCxo/9yWpqLYfbdcg0UW/4xsVs0sRj923lYdgDD8Iht4anot+3 +lKK6PUht50iBCpVdmlYG1mfI5FWIEXZy/RKFMA/wwwXHqT9A7v5O1M4thFvyUHbA +4926eGIZpU2RvPPCJDkReUmCQTqgmNdjFft8uLs4o10hiHp0vZKj+Zjm7rfSle8r +cRCeTirfI+MVSLEP2ZhbVvFBQ2kXjFH1vtdZZaTEriWDCTb+F44K8zjeGpz/Yb/X +PUfeT5++WPzGFxwaR1FNGL9gLUJLL656a8YeZdWWb//byMENdOoPMBazIGJ31k9S +0aPtOs4hqz1MWRmoc67Xf/T3wzmgZVlpFEBL8wyMFoIbtAqj/ZwUSQ0f8BdF4BRk +MwbkZ1PQoAGpiGJSUq6I1IFSp5mHf890AU50DkGmgOXNbjoOoGNRWO4NuEAiecA9 ++cpI6GRKyos9gsdiKyxObHqc +=hVIR -----END PGP SIGNATURE-----