Tue, 03 Nov 2026 12:00:32 UTC Log in

python-django6-6.1.1-2.fc45

failed
A high-level Python Web framework built by guoguo completed Thu, 29 Oct 2026 22:23:19 UTC
Task 124077

Description

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle.

RPMs

No RPMs

Changelog

* Tue Sep 08 2026 Michel Lind <salimma@fedoraproject.org> - 6.1.1-2
- Conditionally revert unneeded setuptools bump when building for F44
- update declared versions of bundled JS files

* Tue Sep 08 2026 Michel Lind <salimma@fedoraproject.org> - 6.1.1-1
- Update to version 6.1.1; Resolves RHBZ#2484355
- CVE fixes from 6.0.8
- Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery
  via spatial lookups
- Fixes CVE-2026-15830 [moderate]: Potential denial-of-service
  vulnerability via nested geometry collections
- Fixes CVE-2026-15920 [moderate]: Potential cross-site scripting via
  URLField values in the admin
- CVE fixes from 6.0.7 [low]
- Fixes CVE-2026-48588: Potential exposure of private data via cached Set-
  Cookie response
- Fixes CVE-2026-53877: Heap buffer over-read in GDALRaster
- Fixes CVE-2026-53878: Header injection possibility since
  DomainNameValidator accepted newlines in input
- CVE fixes from 6.0.6 [low]
- Fixes CVE-2026-6873: Signed cookie salt namespace collision
- Fixes CVE-2026-7666: Potential unencrypted email transmission via
  STARTTLS in the SMTP backend
- Fixes CVE-2026-8404: Potential exposure of private data via case-
  sensitive Cache-Control directives
- Fixes CVE-2026-35193: Potential exposure of private data via missing
  Vary: Authorization
- Fixes CVE-2026-48587: Potential exposure of private data via whitespace
  padding in Vary header

* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild

* Fri Jun 05 2026 Python Maint <python-maint@redhat.com> - 6.0.5-3
- Rebuilt for Python 3.15

* Thu Jun 04 2026 Python Maint <python-maint@redhat.com> - 6.0.5-2
- Bootstrap for Python 3.15

* Tue May 12 2026 Michel Lind <salimma@fedoraproject.org> - 6.0.5-1
- Update to version 6.0.5; Resolves RHBZ#2444118
- Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
  requests via file upload limit bypass
- Fixes CVE-2026-35192: Session fixation via public cached pages and
  SESSION_SAVE_EVERY_REQUEST
- Fixes CVE-2026-6907: Potential exposure of private data due to incorrect
  handling of Vary: * in UpdateCacheMiddleware
- Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen
  conflation
- Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
- Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
- Fixes CVE-2026-33033: Potential denial-of-service vulnerability in
  MultiPartParser via base64-encoded file upload
- Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI
  requests via memory upload limit bypass
- Fixes CVE-2026-25674: Potential incorrect permissions on newly created
  file system objects

* Thu Feb 19 2026 Michel Lind <salimma@fedoraproject.org> - 6.0.2-1
- Initial package; Resolves: RHBZ#2440421