package/python-django: security bump to version 3.0.3
authorPeter Korsgaard <peter@korsgaard.com>
Mon, 3 Feb 2020 11:28:21 +0000 (12:28 +0100)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Mon, 3 Feb 2020 11:31:22 +0000 (12:31 +0100)
commit44e53c6b4843ca3f78eac5216cd737b8e27f60df
treecd70a2ce9e53a07c4291717ce22761a930cca936
parent1857b676870252b5c3be1502cb5bb96ee76b3110
package/python-django: security bump to version 3.0.3

Fixes the following security issues:

- CVE-2020-7471: Potential SQL injection via StringAgg(delimiter)
  django.contrib.postgres.aggregates.StringAgg aggregation function was
  subject to SQL injection, using a suitably crafted delimiter.

For more details, see the advisory:
https://www.djangoproject.com/weblog/2020/feb/03/security-releases/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
package/python-django/python-django.hash
package/python-django/python-django.mk