CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

www/py-django606.0.9

High-level Python Web Framework

0
unaddressed
0
VuXML only, still affected
4
fixed
Maintainer
python@FreeBSD.org
Packages
py312-django60 6.0.9
Upstream
up to date
CPE
djangoproject:django from the port
WWW
https://www.djangoproject.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (4)

Show 4 fixed
VuXML entries whose affected range this version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVE-2026-153078.72026-08-04An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing…
CVE-2026-153376.92026-08-04An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `django.utils.translation.check_for_language()` is subject to a potential denial-of-service att…
CVE-2026-158306.92026-08-04An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a potential denial-of-service …
CVE-2026-159205.12026-08-04An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `django.contrib.admin.utils.display_for_field()` renders `URLField` values as clickable links i…

Commits (13)

Wen Heping (wen) · 6.0.9
www/py-django60: Update to 6.0.9
f4d1047e94
Wen Heping (wen) · 6.0.8
www/py-django60: Update to 6.0.8
6b2158cd82
Wen Heping (wen) · 6.0.7
www/py-django60: Update to 6.0.7
516da2f1fc
Tijl Coosemans (tijl) · 6.0.6
*/*: Use C.UTF-8 locale

Ports 02f27a83b44d fixed the ports tree to the C locale so it would work
correctly in environments where users use a locale that isn't compatible
with the C locale, e.g. xx_YY.UTF-8 where [A-Z] includes more than just
upper case letters.  USE_LOCALE was introduced to let ports use another
locale if they needed it.  The C.UTF-8 locale was created later on to be
mostly compatible with the C locale.

Switch the ports tree locale to C.UTF-8 and remove USE_LOCALE.  The
world has moved to Unicode so all ports either require it or know how to
build correctly in a Unicode environment.

PR:		295945
Exp-run by:	antoine
b6ec06f079
Dag-Erling Smørgrav (des) · 6.0.6
www/py-django60: Allow building with newer Python

There is no reason to pin this port to Python <= 3.12.  Upstream claims
support for >= 3.12, and we've patched it to run with 3.11, so change
the version requirement to 3.11+.

Reviewed by:	kai
Differential Revision:	https://reviews.freebsd.org/D57714
0ff1a2bb71
Wen Heping (wen) · 6.0.6
www/py-django60: Update to 6.0.6
2a86297848
Po-Chuan Hsieh (sunpoet) · 6.0.5
www/py-django60: Update to 6.0.5

Changes:	https://docs.djangoproject.com/en/6.0/releases/
b48357863f
Wen Heping (wen) · 6.0.4
www/py-django60: Update to 6.0.4
1b67b7a03c
Wen Heping (wen) · 6.0.3
www/py-django60: Update to 6.0.3
5c93c840f4
Wen Heping (wen) · 6.0.2
www/py-django60: Update to 6.0.2
9a141d8a24
Wen Heping (wen) · 6.0.1
www/py-django60: Update to 6.0.1
9d6a0ce0c6
Antoine Brodin (antoine) · 6.0
*: allow testing 3.12 as default python version

PR:		285957
8d81b85e23
Wen Heping (wen) · 6.0
www/py-django60: Add new port

Django is a high-level Python Web framework that encourages rapid development
and clean, pragmatic design.

Developed and used over the past two years by a fast-moving online-news
operation, Django was designed from scratch to handle two challenges: the
intensive deadlines of a newsroom and the stringent requirements of experienced
Web developers. It has convenient niceties for developing content-management
systems, but it's an excellent tool for building any Web site.
94f7311cc2