python.pkgs.django_1_8: 1.8.18 -> 1.8.19

This fixes CVE-2018-7536 and CVE-2018-7537:
https://www.djangoproject.com/weblog/2018/mar/06/security-releases/

cc https://github.com/NixOS/nixpkgs/issues/52679
This commit is contained in:
Robert Schütz 2018-12-24 11:10:30 +01:00
parent 0e19695013
commit 461552526b
3 changed files with 4 additions and 5 deletions

View file

@ -6,12 +6,11 @@
buildPythonPackage rec {
name = "Django-${version}";
version = "1.8.18";
disabled = pythonOlder "2.7";
version = "1.8.19";
src = fetchurl {
url = "http://www.djangoproject.com/m/releases/1.8/${name}.tar.gz";
sha256 = "1ishvbihr9pain0486qafb18dnb7v2ppq34nnx1s8f95bvfiqqf7";
sha256 = "0iy0ni9j1rnx9b06ycgbg2dkrf3qid3y2jipk9x28cykz5f4mm1k";
};
# too complicated to setup

View file

@ -1,7 +1,7 @@
{ stdenv, buildPythonPackage, fetchPypi, isPy3k, which
, django, django_tagging, whisper, pycairo, cairocffi, ldap, memcached, pytz, urllib3, scandir
}:
if django.version != "1.8.18"
if django.version != "1.8.19"
|| django_tagging.version != "0.4.3"
then throw "graphite-web should be build with django_1_8 and django_tagging_0_4_3"
else buildPythonPackage rec {

View file

@ -2215,7 +2215,7 @@ in {
django_tagging = callPackage ../development/python-modules/django_tagging { };
django_tagging_0_4_3 = if
self.django.version != "1.8.18"
self.django.version != "1.8.19"
then throw "django_tagging_0_4_3 should be build with django_1_8"
else (callPackage ../development/python-modules/django_tagging {}).overrideAttrs (attrs: rec {
pname = "django-tagging";