python3-django: upgrade 2.2.24 -> 2.2.25

changelog:
================================================================================

Django 2.2.25 fixes a security issue with severity "low" in 2.2.24.

CVE-2021-44420: Potential bypass of an upstream access control based on URL paths
=================================================================================

HTTP requests for URLs with trailing newlines could bypass an upstream access
control based on URL paths.

Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>

1 files changed, 12 insertions, 0 deletions

diff --git a/meta-python/recipes-devtools/python/python3-django_2.2.25.bb b/meta-python/recipes-devtools/python/python3-django_2.2.25.bb
new file mode 100644
index 0000000000..86d21fed06
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-django_2.2.25.bb
@@ -0,0 +1,12 @@
+require python-django.inc
+
+# Pin to 2.2.x LTS releases ONLY for this recipe
+UPSTREAM_CHECK_REGEX = "/${PYPI_PACKAGE}/(?P<pver>(2\.2\.\d*)+)/"
+
+inherit setuptools3
+
+SRC_URI[sha256sum] = "b1e65eaf371347d4b13eb7e061b09786c973061de95390c327c85c1e2aa2349c"
+
+RDEPENDS:${PN} += "\
+    ${PYTHON_PN}-sqlparse \
+"