UbuntuUpdates.org

Package "python3-django"

Name: python3-django

Description:

High-level Python web development framework

Latest version: 3:4.2.4-1ubuntu2.2
Release: mantic (23.10)
Level: updates
Repository: main
Head package: python-django
Homepage: http://www.djangoproject.com/

Links


Download "python3-django"


Other versions of "python3-django" in Mantic

Repository Area Version
base main 3:4.2.4-1ubuntu2
security main 3:4.2.4-1ubuntu2.2

Changelog

Version: 3:4.2.4-1ubuntu2.2 2024-03-04 20:07:02 UTC

  python-django (3:4.2.4-1ubuntu2.2) mantic-security; urgency=medium

  * SECURITY UPDATE: regular expression denial-of-service
    - debian/patches/CVE-2024-27351.patch: prevented potential ReDoS in
      Truncator.words() in django/utils/text.py,
      tests/utils_tests/test_text.py.
    - CVE-2024-27351

 -- Marc Deslauriers <email address hidden> Mon, 26 Feb 2024 11:51:37 -0500

Source diff to previous version

Version: 3:4.2.4-1ubuntu2.1 2024-02-06 19:06:59 UTC

  python-django (3:4.2.4-1ubuntu2.1) mantic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-24680.patch: rewrite
      regex logic to avoid DoS in django/contrib/humanize/templatetags
      /humanize.py, tests/humanize_tests/tests.py.
    - CVE-2024-24680

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 30 Jan 2024 10:38:29 -0300




About   -   Send Feedback to @ubuntu_updates