package/python-django: security bump to version 3.0.13
authorPeter Korsgaard <peter@korsgaard.com>
Fri, 19 Feb 2021 09:59:41 +0000 (10:59 +0100)
committerYann E. MORIN <yann.morin.1998@free.fr>
Fri, 19 Feb 2021 21:36:22 +0000 (22:36 +0100)
commit82abd78a01fc832f758fc2b2d7326879500fb786
treee5e6b0af3d7448c1582f1b7d57603c3e911afaaa
parentd71de4143d7a8554929f2a1e9731f83a4cf85fd3
package/python-django: security bump to version 3.0.13

Fixes the following security issue:

- CVE-2021-23336: Web cache poisoning via django.utils.http.limited_parse_qsl()

  Django contains a copy of urllib.parse.parse_qsl() which was added to
  backport some security fixes.  A further security fix has been issued
  recently such that parse_qsl() no longer allows using ; as a query
  parameter separator by default.  Django now includes this fix.  See
  bpo-42967 for further details.

For more details, see the advisory:
https://www.djangoproject.com/weblog/2021/feb/19/security-releases/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
package/python-django/python-django.hash
package/python-django/python-django.mk