From 8415b4d4c3ef6f184d3e3a876a787ad9c994d316 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Wed, 3 Sep 2025 22:46:42 +0200 Subject: [PATCH 1/2] python3Packages.django_5_1: 5.1.11 -> 5.1.12 https://docs.djangoproject.com/en/5.1/releases/5.1.12/ https://www.djangoproject.com/weblog/2025/sep/03/security-releases/ Fixes: CVE-2025-57833 --- pkgs/development/python-modules/django/5_1.nix | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/pkgs/development/python-modules/django/5_1.nix b/pkgs/development/python-modules/django/5_1.nix index bf01cf87c85c..7ea62daad3d9 100644 --- a/pkgs/development/python-modules/django/5_1.nix +++ b/pkgs/development/python-modules/django/5_1.nix @@ -44,7 +44,7 @@ buildPythonPackage rec { pname = "django"; - version = "5.1.11"; + version = "5.1.12"; pyproject = true; disabled = pythonOlder "3.10"; @@ -53,7 +53,7 @@ buildPythonPackage rec { owner = "django"; repo = "django"; rev = "refs/tags/${version}"; - hash = "sha256-yHoK7NGa91QEVFLeHqJo126qNg1pTE7W6LEtbCLy4sw="; + hash = "sha256-QWBxP728D/HQb+WLPkaXMOQtlO8b+FWcYxZyHoVcxVI="; }; patches = [ @@ -72,11 +72,6 @@ buildPythonPackage rec { hash = "sha256-+K20/V8sh036Ox9U7CSPgfxue7f28Sdhr3MsB7erVOk="; }) ] - ++ lib.optionals (pythonAtLeast "3.13") [ - # https://code.djangoproject.com/ticket/36499 - # https://github.com/django/django/pull/19639 - ./3.13.6-html-parser.patch - ] ++ lib.optionals withGdal [ (replaceVars ./django_5_set_geos_gdal_lib.patch { geos = geos; From 45959c8c0aff56f77c089172249719fd0edd437d Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Wed, 3 Sep 2025 22:50:08 +0200 Subject: [PATCH 2/2] python3Packages.django_5_2: 5.2.5 -> 5.2.6 https://docs.djangoproject.com/en/5.2/releases/5.2.6/ https://www.djangoproject.com/weblog/2025/sep/03/security-releases/ Fixes: CVE-2025-57833 --- pkgs/development/python-modules/django/5_2.nix | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/pkgs/development/python-modules/django/5_2.nix b/pkgs/development/python-modules/django/5_2.nix index c1db9106da63..15d5be84173d 100644 --- a/pkgs/development/python-modules/django/5_2.nix +++ b/pkgs/development/python-modules/django/5_2.nix @@ -43,7 +43,7 @@ buildPythonPackage rec { pname = "django"; - version = "5.2.5"; + version = "5.2.6"; pyproject = true; disabled = pythonOlder "3.10"; @@ -52,7 +52,7 @@ buildPythonPackage rec { owner = "django"; repo = "django"; rev = "refs/tags/${version}"; - hash = "sha256-1Lw0L+mPynf9CmioiTQhePgqCLniUkv9E0ZIoHhhBTs="; + hash = "sha256-Bzm4FTzYeXEEFenkT2gN1IzYnUIo7tlD2GI/sX2THkw="; }; patches = [ @@ -64,11 +64,6 @@ buildPythonPackage rec { # disable test that expects timezone issues ./django_5_disable_failing_tests.patch ] - ++ lib.optionals (pythonAtLeast "3.13") [ - # https://code.djangoproject.com/ticket/36499 - # https://github.com/django/django/pull/19639 - ./3.13.6-html-parser.patch - ] ++ lib.optionals withGdal [ (replaceVars ./django_5_set_geos_gdal_lib.patch { geos = geos;