Files
buildroot/package/python-django/python-django.mk
Titouan Christophe 00b9069f46 package/python-django: security bump to v6.0.6
See the release notes:
https://docs.djangoproject.com/en/6.0/releases/6.0.6/

This fixes the following vulnerabilities:
- CVE-2026-6873 : Signed cookie salt namespace collision
- CVE-2026-7666 : Potential unencrypted email transmission via STARTTLS
                  in the SMTP backend
- CVE-2026-8404 : Potential exposure of private data via case-sensitive
                  Cache-Control directives
- CVE-2026-35193: Potential exposure of private data via missing
                  Vary: Authorization
- CVE-2026-48587: Potential exposure of private data via whitespace padding
                  in Vary header

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-06-12 18:39:59 +02:00

27 lines
1.1 KiB
Makefile

################################################################################
#
# python-django
#
################################################################################
PYTHON_DJANGO_VERSION = 6.0.6
PYTHON_DJANGO_SOURCE = django-$(PYTHON_DJANGO_VERSION).tar.gz
PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/source/d/django
PYTHON_DJANGO_LICENSE = BSD-3-Clause, MIT (jquery, utils/archive.py), BSD-2-Clause (inlines.js), CC-BY-4.0 (admin svg files)
PYTHON_DJANGO_LICENSE_FILES = LICENSE \
django/contrib/gis/measure.py \
django/contrib/gis/gdal/LICENSE \
django/contrib/gis/geos/LICENSE \
django/contrib/admin/static/admin/js/inlines.js \
django/contrib/admin/static/admin/js/vendor/jquery/LICENSE.txt \
django/contrib/admin/static/admin/js/vendor/select2/LICENSE.md \
django/contrib/admin/static/admin/js/vendor/xregexp/LICENSE.txt \
django/contrib/admin/static/admin/img/README.md \
django/dispatch/license.txt \
django/utils/archive.py
PYTHON_DJANGO_CPE_ID_VENDOR = djangoproject
PYTHON_DJANGO_CPE_ID_PRODUCT = django
PYTHON_DJANGO_SETUP_TYPE = setuptools
$(eval $(python-package))