Описание
Security update for python-Django
This update for python-Django fixes the following issues:
There is an issue with the previous fix for CVE-2024-45230. Please consider the following vulnerability fixed only after the installation of this update.
- CVE-2024-45230: Fixed potential denial-of-service vulnerability in django.utils.html.urlize(). (bsc#1229823)
Список пакетов
openSUSE Leap 15.5
python3-Django-2.0.7-150000.1.36.1
Ссылки
- Link for SUSE-SU-2024:3187-1
- E-Mail link for SUSE-SU-2024:3187-1
- SUSE Security Ratings
- SUSE Bug 1229823
- SUSE CVE CVE-2024-45230 page
Описание
An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Затронутые продукты
openSUSE Leap 15.5:python3-Django-2.0.7-150000.1.36.1
Ссылки
- CVE-2024-45230
- SUSE Bug 1229823