UbuntuUpdates.org

Package "python3-django"

Name: python3-django

Description:

High-level Python web development framework
Latest version: 3:3.2.18-1ubuntu0.5
Release: lunar (23.04)
Level: security
Repository: main
Head package: python-django
Homepage: http://www.djangoproject.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-django"

All arch deb package
APT INSTALL

Other versions of "python3-django" in Lunar

Repository Area Version
base main 3:3.2.18-1
updates main 3:3.2.18-1ubuntu0.5

Changelog

Version: 3:3.2.18-1ubuntu0.5 2023-10-04 18:10:06 UTC

  python-django (3:3.2.18-1ubuntu0.5) lunar-security; urgency=medium

  * SECURITY UPDATE: DoS possibility in django.utils.text.Truncator
    - debian/patches/CVE-2023-43665.patch: limit size of input strings in
      django/utils/text.py, tests/utils_tests/test_text.py.
    - CVE-2023-43665

 -- Marc Deslauriers <email address hidden> Wed, 27 Sep 2023 13:00:07 -0400
Source diff to previous version

Version: 3:3.2.18-1ubuntu0.4 2023-09-18 16:08:12 UTC

  python-django (3:3.2.18-1ubuntu0.4) lunar-security; urgency=medium

  * SECURITY UPDATE: DoS in django.utils.encoding.uri_to_iri()
    - debian/patches/CVE-2023-41164.patch: properly handle large number of
      Unicode characters in django/utils/encoding.py,
      tests/utils_tests/test_encoding.py.
    - CVE-2023-41164

 -- Marc Deslauriers <email address hidden> Fri, 15 Sep 2023 08:39:57 -0400
Source diff to previous version

Version: 3:3.2.18-1ubuntu0.3 2023-07-06 16:07:24 UTC

  python-django (3:3.2.18-1ubuntu0.3) lunar-security; urgency=medium

  * SECURITY UPDATE: Potential ReDoS issues
    - debian/patches/CVE-2023-36053.patch: prevent potential ReDoS in
      EmailValidator and URLValidator in django/core/validators.py,
      django/forms/fields.py, docs/ref/forms/fields.txt,
      docs/ref/validators.txt,
      tests/forms_tests/field_tests/test_emailfield.py,
      tests/forms_tests/tests/test_forms.py, tests/validators/tests.py.
    - CVE-2023-36053
  * debian/patches/fix-url-validator.patch: Cherry-pick upstream commit to
    fix URLValidator crash in some edge cases (LP: #2025155)

 -- Marc Deslauriers <email address hidden> Tue, 27 Jun 2023 09:18:49 -0400
Source diff to previous version
2025155 SRU: Fix URLValidator crash in some edge cases
CVE-2023-36053 In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular express

Version: 3:3.2.18-1ubuntu0.1 2023-05-03 15:07:24 UTC

  python-django (3:3.2.18-1ubuntu0.1) lunar-security; urgency=medium

  * SECURITY UPDATE: Potential bypass of validation when uploading multiple
    files using one form field
    - debian/patches/CVE-2023-31047.patch: prevent uploading multiple files
      in django/forms/widgets.py, docs/topics/http/file-uploads.txt,
      tests/forms_tests/field_tests/test_filefield.py,
      tests/forms_tests/widget_tests/test_clearablefileinput.py,
      tests/forms_tests/widget_tests/test_fileinput.py.
    - CVE-2023-31047

 -- Marc Deslauriers <email address hidden> Wed, 26 Apr 2023 09:55:57 -0400
CVE-2023-31047 RESERVED


About   -   Send Feedback to @ubuntu_updates