Hi, ports@: Here is a patch for www/py-django: i) Update stable to 2.2.4 and lts to 1.11.23, which fixed CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235 ii) Add devel/py-tblib as TEST_DEPENDS, which will enable django do mre tests. py-tblib is a new port which I submitted just now.
It build well and run well on amd64-head system. Three(total over 10000) tests failed, but it was not caused by this update. Comments? OK? wen
Index: py-django/Makefile.inc =================================================================== RCS file: /cvs/ports/www/py-django/Makefile.inc,v retrieving revision 1.4 diff -u -p -r1.4 Makefile.inc --- py-django/Makefile.inc 3 Jul 2019 09:41:45 -0000 1.4 +++ py-django/Makefile.inc 8 Aug 2019 14:16:46 -0000 @@ -20,6 +20,8 @@ SUBST_VARS += LNAME RUN_DEPENDS += devel/py-tz,python3 +TEST_DEPENDS += devel/py-tblib,python3 + do-test: cd ${WRKSRC} && env LC_CTYPE=en_US.UTF-8 PYTHONPATH=. \ ${MODPY_BIN} tests/runtests.py --settings=test_sqlite Index: py-django/lts/Makefile =================================================================== RCS file: /cvs/ports/www/py-django/lts/Makefile,v retrieving revision 1.38 diff -u -p -r1.38 Makefile --- py-django/lts/Makefile 3 Jul 2019 09:41:45 -0000 1.38 +++ py-django/lts/Makefile 8 Aug 2019 14:16:46 -0000 @@ -4,7 +4,7 @@ PORTROACH = limit:^1\.11 COMMENT = high-level Python web framework (LTS version) -MODPY_EGG_VERSION = 1.11.22 +MODPY_EGG_VERSION = 1.11.23 LNAME = django-lts post-install: Index: py-django/lts/distinfo =================================================================== RCS file: /cvs/ports/www/py-django/lts/distinfo,v retrieving revision 1.32 diff -u -p -r1.32 distinfo --- py-django/lts/distinfo 3 Jul 2019 09:41:45 -0000 1.32 +++ py-django/lts/distinfo 8 Aug 2019 14:16:46 -0000 @@ -1,2 +1,2 @@ -SHA256 (Django-1.11.22.tar.gz) = gw1dQKFwUIlQK7pwYFqzJGgxRA/8FtFQHf7u9fS5yEU= -SIZE (Django-1.11.22.tar.gz) = 7972885 +SHA256 (Django-1.11.23.tar.gz) = UqZtf4sDbQLaCkRyNZ6L4XJ0JPweS09caE75fee1aeE= +SIZE (Django-1.11.23.tar.gz) = 7849738 Index: py-django/lts/pkg/PLIST =================================================================== RCS file: /cvs/ports/www/py-django/lts/pkg/PLIST,v retrieving revision 1.35 diff -u -p -r1.35 PLIST --- py-django/lts/pkg/PLIST 3 Jul 2019 09:41:46 -0000 1.35 +++ py-django/lts/pkg/PLIST 8 Aug 2019 14:16:55 -0000 @@ -6830,6 +6830,7 @@ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.19.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.20.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.21.txt +share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.22.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.2.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/${MODPY_EGG_VERSION}.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.3.txt Index: py-django/stable/Makefile =================================================================== RCS file: /cvs/ports/www/py-django/stable/Makefile,v retrieving revision 1.28 diff -u -p -r1.28 Makefile --- py-django/stable/Makefile 3 Jul 2019 09:41:46 -0000 1.28 +++ py-django/stable/Makefile 8 Aug 2019 14:16:55 -0000 @@ -2,7 +2,7 @@ COMMENT = high-level Python web framework -MODPY_EGG_VERSION = 2.2.3 +MODPY_EGG_VERSION = 2.2.4 LNAME = django Index: py-django/stable/distinfo =================================================================== RCS file: /cvs/ports/www/py-django/stable/distinfo,v retrieving revision 1.24 diff -u -p -r1.24 distinfo --- py-django/stable/distinfo 3 Jul 2019 09:41:46 -0000 1.24 +++ py-django/stable/distinfo 8 Aug 2019 14:16:55 -0000 @@ -1,2 +1,2 @@ -SHA256 (Django-2.2.3.tar.gz) = TSP2GyaJK6x4XwdAG8OMv4+kzsmT9ADpzZ3fKP1RwOo= -SIZE (Django-2.2.3.tar.gz) = 8992109 +SHA256 (Django-2.2.4.tar.gz) = FqXVRBFZl4Csnf47mzj5D3hcUSWaWE4LJLbxSn9pqug= +SIZE (Django-2.2.4.tar.gz) = 8856979 Index: py-django/stable/pkg/PLIST =================================================================== RCS file: /cvs/ports/www/py-django/stable/pkg/PLIST,v retrieving revision 1.25 diff -u -p -r1.25 PLIST --- py-django/stable/pkg/PLIST 3 Jul 2019 09:41:46 -0000 1.25 +++ py-django/stable/pkg/PLIST 8 Aug 2019 14:16:58 -0000 @@ -6977,6 +6977,7 @@ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.20.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.21.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.22.txt +share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.23.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.3.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.4.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/1.11.5.txt @@ -7111,6 +7112,7 @@ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.0.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.1.1.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.1.10.txt +share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.1.11.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.1.2.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.1.3.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.1.4.txt @@ -7122,6 +7124,7 @@ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${ share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.1.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.2.1.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.2.2.txt +share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.2.3.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/${MODPY_EGG_VERSION}.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/2.2.txt share/doc/${MODPY_PY_PREFIX}-${LNAME}-${MODPY_EGG_VERSION}/releases/index.txt