www/py-django-import-export 4.4.1 NetBSD

v4.4.3 * This release patches a denial-of-service vulnerability in :class:`~import_export.widgets.IntegerWidget`. ``IntegerWidget.clean()`` converted imported values using ``int(Decimal(value))`` with no bound on the value's magnitude. A value written in exponent notation, such as ``1e1000000``, is cheap to parse as a ``Decimal`` but forces Python to expand every digit when converted to ``int``, a cost that grows superlinearly with the digit count. A single such value could stall the importing process for several seconds while pinning a CPU core, and a file containing many such rows multiplied the cost. ``IntegerWidget`` is the default widget for all integer model fields, including the ``id`` column used by …