Subject: CVS commit: pkgsrc/www/py-django3
From: Adam Ciarcinski
Date: 2024-03-04 16:47:29
Message id: 20240304154729.56A20FA29@cvs.NetBSD.org

Log Message:
py-django3: updated to 3.2.25

Django 3.2.25 fixes a security issue with severity “moderate” and a \ 
regression in 3.2.24.

CVE-2024-27351: Potential regular expression denial-of-service in \ 
django.utils.text.Truncator.words()

django.utils.text.Truncator.words() method (with html=True) and \ 
truncatewords_html template filter were subject to a potential regular \ 
expression denial-of-service attack using a suitably crafted string (follow up \ 
to CVE-2019-14232 and CVE-2023-43665).

Bugfixes

Fixed a regression in Django 3.2.24 where intcomma template filter could return \ 
a leading comma for string representation of floats.

Files:
RevisionActionfile
1.38modifypkgsrc/www/py-django3/Makefile
1.37modifypkgsrc/www/py-django3/distinfo