starlingx/tools
Code Issues Proposed changes

Debian: package : fix CVE-2023-36053/CVE-2023-23969/CVE-2023-24580/CVE-2023-31047

Browse Source 
Upgrade python3-django to 2:2.2.28-1~deb11u2

Refer to:
https://nvd.nist.gov/vuln/detail/CVE-2023-36053
https://nvd.nist.gov/vuln/detail/CVE-2023-23969
https://nvd.nist.gov/vuln/detail/CVE-2023-24580
https://nvd.nist.gov/vuln/detail/CVE-2023-31047

Test Plan:
Pass: downloader
Pass: build-pkgs --clean --all
Pass: build-image
Pass: boot

Closes-bug: #2030472

Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com>
Change-Id: I34816384079b1d00352d67eea7194071fd1a61fe
This commit is contained in:
Wentao Zhang 2023-08-22 09:21:12 +08:00
parent de92778fce
commit 8a6a03eff8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -888,7 +888,7 @@ python3-defusedxml 0.6.0-2
python3-deprecation 2.1.0-1
python3-dev 3.9.2-3
python3-distutils 3.9.2-1
python3-django 2:2.2.28-1~deb11u1 https://snapshot.debian.org/archive/debian/20221120T210808Z/pool/main/p/python-django/python3-django_2.2.28-1~deb11u1_all.deb
python3-django 2:2.2.28-1~deb11u2 https://snapshot.debian.org/archive/debian-security/20230803T204610Z/pool/updates/main/p/python-django/python3-django_2.2.28-1~deb11u2_all.deb
python3-django-appconf 1.0.3-1
python3-django-compressor 2.4-2
python3-django-debreach 2.0.1-2