From 40dccdc3b923ab0a1ef18ffe05c1c941d5e76d32 Mon Sep 17 00:00:00 2001 From: "deepin-community-bot[bot]" <156989552+deepin-community-bot[bot]@users.noreply.github.com> Date: Fri, 31 Jul 2026 10:00:17 +0000 Subject: [PATCH] feat: update python-django to 3:4.2.28-0+deb13u2 --- debian/changelog | 11 +++++++++ ...-Workaround-changes-in-CVE-2025-6069.patch | 23 +++++++++++++++++++ debian/patches/series | 1 + 3 files changed, 35 insertions(+) create mode 100644 debian/patches/0006-Workaround-changes-in-CVE-2025-6069.patch diff --git a/debian/changelog b/debian/changelog index 5247a7de..96941a9d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,14 @@ +python-django (3:4.2.28-0+deb13u2) stable-proposed-updates; urgency=medium + + * The fix for CVE-2025-6069 in the python3.13 source package (released + as part of a suite of updates in 3.13.5-2+deb13u2) modified Python's + html.parser.HTMLParser class in such a way that changed the behaviour of + Django's strip_tags() method. As a result of this change, we update the + testsuite here for the newly expected results in order to prevent a build + failure. (Closes: #1137039) + + -- Chris Lamb Tue, 26 May 2026 14:35:49 -0700 + python-django (3:4.2.28-0+deb13u1) trixie-security; urgency=high * New upstream security release: diff --git a/debian/patches/0006-Workaround-changes-in-CVE-2025-6069.patch b/debian/patches/0006-Workaround-changes-in-CVE-2025-6069.patch new file mode 100644 index 00000000..a3fe4577 --- /dev/null +++ b/debian/patches/0006-Workaround-changes-in-CVE-2025-6069.patch @@ -0,0 +1,23 @@ +From: Chris Lamb +Date: Fri, 22 May 2026 11:20:52 -0700 +Subject: Workaround changes in CVE-2025-6069 + +--- + tests/utils_tests/test_html.py | 4 +--- + 1 file changed, 1 insertion(+), 3 deletions(-) + +diff --git a/tests/utils_tests/test_html.py b/tests/utils_tests/test_html.py +index a5acc582f7b4..9c5f5e7ecc6f 100644 +--- a/tests/utils_tests/test_html.py ++++ b/tests/utils_tests/test_html.py +@@ -116,9 +116,7 @@ class TestUtilsHtml(SimpleTestCase): + (3, 8): (3, 8, math.inf), + } + major_version = sys.version_info[:2] +- htmlparser_fixed_security = sys.version_info >= min_fixed_security.get( +- major_version, major_version +- ) ++ htmlparser_fixed_security = True + htmlparser_fixed_incomplete_entities = ( + sys.version_info + >= min_fixed_incomplete_entities.get(major_version, major_version) diff --git a/debian/patches/series b/debian/patches/series index 0e8a07b3..936ff0a3 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -3,3 +3,4 @@ 0004-Use-locally-installed-documentation-sources.patch 0004-Set-the-default-shebang-to-new-projects-to-use-Pytho.patch py313-test-help-default-options-with-custom-arguments.patch +0006-Workaround-changes-in-CVE-2025-6069.patch