py-django vulnerabilities

Li-Wen Hsu lwhsu at FreeBSD.org
Thu Aug 20 12:15:55 UTC 2015


On Wed, Aug 19, 2015 at 10:36:54 -0500, Mark Felder wrote:
> On Wed, Aug 19, 2015, at 10:30, Mark Felder wrote:
> > On Wed, Aug 19, 2015, at 10:27, Li-Wen Hsu wrote:
> > > Thanks for the update.  I have the same patch with you.  But I haven't
> > > had www/py-django-devel pass the poudriere test.  Are you working on
> > > that too?
> > 
> > I have not yet touched www/py-django-devel. I figure fewer users are
> > affected by it, so I wanted to get the stable releases pushed out first.
> 
> Setting the snapshot date to 20150819 seems to fetch and build fine. Is
> that OK? Do you follow django development and prefer to carefully choose
> a different snapshot date to avoid any recent bugs/issues that could
> affect users?

GH_TAGNAME should also be updated, or you will get the old code.

I got following error from poudriere.

https://gist.github.com/anonymous/7fdf1a8d9645ef324e82

I am a bit not sure if this is due to our python port infrastructure or
django itself.  Haven't looked into it, but `python setup.py install` on
Mac also failed.

Li-Wen

-- 
Li-Wen Hsu <lwhsu at FreeBSD.org>
http://lwhsu.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 949 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-python/attachments/20150820/f1cb7305/attachment.bin>


More information about the freebsd-python mailing list