Apply django 1.11.21 -> 1.11.27 security patches

overhangio · Dec 21, 2019 · 2ba57fb · 2ba57fb
1 parent 25f9825
commit 2ba57fb
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,7 @@ Note: Breaking changes between versions are indicated by "💥".
 
 ## Unreleased
 
+- [Security] Apply django 1.11.21 -> 1.11.27 security patches
 - [Bugfix] Fix running dev image with `sudo`
 - [Improvement] Add `cms/lms-env-features` patches (#276)
 - [Feature] Add plugin subcommands

diff --git a/tutor/templates/build/openedx/Dockerfile b/tutor/templates/build/openedx/Dockerfile
@@ -31,6 +31,10 @@ RUN curl https://github.com/edx/edx-platform/commit/b33db2c548a1a530510d785f7659
 RUN curl https://github.com/edx/edx-platform/commit/f9689aadb0f8a41570a4bb76654f980b4e31ad96.patch | git apply -
 # Allow SigV4 authentication for video uploads to S3 https://github.com/edx/edx-platform/pull/22080
 RUN curl https://github.com/overhangio/edx-platform/commit/0d4f6cc3433013960b28e963c4094ef2a2a92f04.patch | git apply -
+# Django upgrades
+RUN curl https://github.com/edx/edx-platform/commit/7731c68b91ba662e6433ab46e434860afc497944.patch | git apply -
+RUN curl https://github.com/edx/edx-platform/commit/86f4902257a431a1a465eec585a116c19d2c4659.patch | git apply -
+RUN curl https://github.com/edx/edx-platform/commit/9490d8e083ccdcf8341694e38bbd9f7200ea2ff3.patch | git apply -
 
 # Download extra locales to /openedx/locale
 RUN cd /tmp \