UbuntuUpdates.org

Package "python3-djoser"

Name: python3-djoser

Description:

REST implementation of Django authentication system (Python3 version)
Latest version: 2.1.0-1ubuntu0.24.10.1
Release: oracular (24.10)
Level: security
Repository: universe
Head package: djoser
Homepage: https://github.com/sunscrapers/djoser

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-djoser"

All arch deb package
APT INSTALL

Other versions of "python3-djoser" in Oracular

Repository Area Version
base universe 2.1.0-1
updates universe 2.1.0-1ubuntu0.24.10.1

Changelog

Version: 2.1.0-1ubuntu0.24.10.1 2025-03-17 21:07:02 UTC

  djoser (2.1.0-1ubuntu0.24.10.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Authentication fallback bypasses custom validations
    - debian/patches/CVE-2024-21543.patch: rollback commit
      8f65bfff16577c7fb0f52bbabf5fb69f6809ba62, reverts the changes to
      /djoser/serializers.py that introduced the vulnerability
    - CVE-2024-21543

 -- Elise Hlady <email address hidden> Tue, 04 Mar 2025 14:10:00 -0800
CVE-2024-21543 Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the syste


About   -   Send Feedback to @ubuntu_updates