Merge pull request #24679 from lsix/django_security_fixes

Django security fixes (for CVEs)
This commit is contained in:
Aristid Breitkreuz 2017-04-08 11:48:46 +02:00 committed by GitHub
commit 59057d2272
2 changed files with 6 additions and 6 deletions

View file

@ -4,12 +4,12 @@
}:
buildPythonPackage rec {
name = "Django-${version}";
version = "1.10.6";
version = "1.10.7";
disabled = pythonOlder "2.7";
src = fetchurl {
url = "http://www.djangoproject.com/m/releases/1.10/${name}.tar.gz";
sha256 = "0q9c7hx720vc0jzq4xlxwhnxmmm8kh0qsqj3l46m29mi98jvwvks";
sha256 = "1f5hnn2dzfr5szk4yc47bs4kk2nmrayjcvgpqi2s4l13pjfpfgar";
};
patches = [

View file

@ -10335,12 +10335,12 @@ in {
django_1_9 = buildPythonPackage rec {
name = "Django-${version}";
version = "1.9.12";
version = "1.9.13";
disabled = pythonOlder "2.7";
src = pkgs.fetchurl {
url = "http://www.djangoproject.com/m/releases/1.9/${name}.tar.gz";
sha256 = "0daaz2rp1rwwpzm5l29wcgg1gbw9yqzcv9x2dsjfz29n806q685x";
sha256 = "079zspfsvfnv9wf6qvg8xmz1m23d0723p2nqyk8gfqb012jxn1y0";
};
# patch only $out/bin to avoid problems with starter templates (see #3134)
@ -10359,12 +10359,12 @@ in {
django_1_8 = buildPythonPackage rec {
name = "Django-${version}";
version = "1.8.17";
version = "1.8.18";
disabled = pythonOlder "2.7";
src = pkgs.fetchurl {
url = "http://www.djangoproject.com/m/releases/1.8/${name}.tar.gz";
sha256 = "01zb2l0gcdb2wgxmvvrhjj9ccdj1mfhn6zhqcdq04m7lzi4dc6q2";
sha256 = "1ishvbihr9pain0486qafb18dnb7v2ppq34nnx1s8f95bvfiqqf7";
};
# too complicated to setup