ALT-PU-2022-1670: package python3-module-django update to version 3.2.13-alt1
Описание
This update upgrades python3-module-django to version 3.2.13-alt1.
Устраненные уязвимости4
Ссылки3
Связанные уязвимости
ALT-PU-2022-1677: package `python3-module-django` update to version 3.2.13-alt1
A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.
A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.