ALT-PU-2022-1075: package python3-module-django update to version 3.2.11-alt1
Описание
This update upgrades python3-module-django to version 3.2.11-alt1.
Устраненные уязвимости6
Ссылки4
GHSA-53qw-q765-4fww
https://github.com/advisories/GHSA-53qw-q765-4fwwGHSA-8c5j-9r9f-c6w8
https://github.com/advisories/GHSA-8c5j-9r9f-c6w8GHSA-jrh2-hc4r-7jwx
https://github.com/advisories/GHSA-jrh2-hc4r-7jwxСвязанные уязвимости
ALT-PU-2022-1124: package `python3-module-django` update to version 3.2.11-alt1
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. In a situation where access to user registration was unrestricted, this provided a potential vector for a denial-of-service attack.
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. In a situation where access to user registration was unrestricted, this provided a potential vector for a denial-of-service attack.