From 5df53ec1eb64ddc9a58544abc5b649fb6be3fdfb Mon Sep 17 00:00:00 2001 From: Alexandru Ardelean Date: Fri, 9 Oct 2026 22:13:53 +0300 Subject: [PATCH] django: update to 6.1.2 Security release: CVE-2026-77050 (denial of service in get_supported_language_variant()), CVE-2026-84429 (denial of service in parse_header_parameters(), reachable through the Accept and Content-Type headers), CVE-2026-87890 (request forgery via spatial lookup byte values) and CVE-2026-87975 (privilege abuse in model formsets with editable primary keys). It also completes an insufficient mitigation of CVE-2026-15307 shipped in 6.1. Signed-off-by: Alexandru Ardelean --- lang/python/django/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lang/python/django/Makefile b/lang/python/django/Makefile index 8a807e10c5..b25f5714e6 100644 --- a/lang/python/django/Makefile +++ b/lang/python/django/Makefile @@ -8,11 +8,11 @@ include $(TOPDIR)/rules.mk PKG_NAME:=django -PKG_VERSION:=6.1.1 +PKG_VERSION:=6.1.2 PKG_RELEASE:=1 PYPI_NAME:=django -PKG_HASH:=7ab93536d8e677aa14554c56426290c69480bf2ee68d7513d4a22f57d6bfeb84 +PKG_HASH:=a1e92451ccb8b514e91bbb3b6d186d20b4030558f116b5d9de6535455ff210b7 PKG_MAINTAINER:=Alexandru Ardelean , Peter Stadler PKG_LICENSE:=BSD-3-Clause