Peter Korsgaard b164fbfc5b package/python-django: security bump to version 2.2.9 ...

Fixes the following security vulnerability:

- CVE-2019-19844: Potential account hijack via password reset form
  By submitting a suitably crafted email address making use of Unicode
  characters, that compared equal to an existing user email when lower-cased
  for comparison, an attacker could be sent a password reset token for the
  matched account

In addition, a number of bugs have been fixed.  For details, see the release
notes:
https://docs.djangoproject.com/en/dev/releases/2.2.9/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2019-12-25 19:39:36 +01:00

..

Config.in

…

python-django.hash

package/python-django: security bump to version 2.2.9

2019-12-25 19:39:36 +01:00

python-django.mk

package/python-django: security bump to version 2.2.9

2019-12-25 19:39:36 +01:00