ALT-PU-2026-8405: package python3-module-django update to version 5.2.14-alt1
Описание
This update upgrades python3-module-django to version 5.2.14-alt1.
Устраненные уязвимости46
Ссылки24
GHSA-2mcm-79hx-8fxw
https://github.com/advisories/GHSA-2mcm-79hx-8fxwGHSA-33mw-q7rj-mjwj
https://github.com/advisories/GHSA-33mw-q7rj-mjwjGHSA-4rrr-2h4v-f3j9
https://github.com/advisories/GHSA-4rrr-2h4v-f3j9GHSA-5hrc-gvxj-w55p
https://github.com/advisories/GHSA-5hrc-gvxj-w55pGHSA-5mf9-h53q-7mhq
https://github.com/advisories/GHSA-5mf9-h53q-7mhqGHSA-6426-9fv3-65x8
https://github.com/advisories/GHSA-6426-9fv3-65x8GHSA-6w2r-r2m5-xq5w
https://github.com/advisories/GHSA-6w2r-r2m5-xq5wGHSA-7h2m-m8vj-598h
https://github.com/advisories/GHSA-7h2m-m8vj-598hGHSA-8p8v-wh79-9r56
https://github.com/advisories/GHSA-8p8v-wh79-9r56GHSA-933h-hp56-hf7m
https://github.com/advisories/GHSA-933h-hp56-hf7mGHSA-frmv-pr5f-9mcr
https://github.com/advisories/GHSA-frmv-pr5f-9mcrGHSA-gvg8-93h5-g6qq
https://github.com/advisories/GHSA-gvg8-93h5-g6qqGHSA-hpr9-3m2g-3j9p
https://github.com/advisories/GHSA-hpr9-3m2g-3j9pGHSA-mjgh-79qc-68w3
https://github.com/advisories/GHSA-mjgh-79qc-68w3GHSA-mmwr-2jhp-mc7j
https://github.com/advisories/GHSA-mmwr-2jhp-mc7jGHSA-mvfq-ggxm-9mc5
https://github.com/advisories/GHSA-mvfq-ggxm-9mc5GHSA-mwm9-4648-f68q
https://github.com/advisories/GHSA-mwm9-4648-f68qGHSA-pwjp-ccjc-ghwg
https://github.com/advisories/GHSA-pwjp-ccjc-ghwgGHSA-q95w-c7qg-hrff
https://github.com/advisories/GHSA-q95w-c7qg-hrffGHSA-qw25-v68c-qjf3
https://github.com/advisories/GHSA-qw25-v68c-qjf3GHSA-rqw2-ghq9-44m7
https://github.com/advisories/GHSA-rqw2-ghq9-44m7GHSA-vrcr-9hj9-jcg6
https://github.com/advisories/GHSA-vrcr-9hj9-jcg6GHSA-w26r-rmm8-9c29
https://github.com/advisories/GHSA-w26r-rmm8-9c29Связанные уязвимости
An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. `FilteredRelation` is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the `**kwargs` passed to `QuerySet.annotate()` or `QuerySet.alias()` on PostgreSQL. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Stackered for reporting this issue.
An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. `FilteredRelation` is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the `**kwargs` passed to `QuerySet.annotate()` or `QuerySet.alias()` on PostgreSQL. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Stackered for reporting this issue.
An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. `FilteredRelation` is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the `**kwargs` passed to `QuerySet.annotate()` or `QuerySet.alias()` on PostgreSQL. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Stackered for reporting this issue.