gpp_maybe
Security update for python-django
SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2816
This update for python-Django fixes the following issues: - CVE-2024-42005: Fixed SQL injection in QuerySet.values() and values_list() (bsc#1228629) - CVE-2024-41989: Fixed Memory exhaustion in django.utils.numberformat.floatformat() (bsc#1228630) - CVE-2024-41990: Fixed denial-of-service vulnerability in django.utils.html.urlize() (bsc#1228631) - CVE-2024-41991: Fixed another denial-of-service vulnerability in django.utils.html.urlize() (bsc#1228632)
-
Release DateAug 7 2024
-
ReferencesBugzilla: 1228632, 1228631, 1228629, 1228630
CVEs: CVE-2024-42005, CVE-2024-41989, CVE-2024-41991, CVE-2024-41990 -
Typesecurity
-
Severityimportant
cloud_download Downloads
To download packages, you need to log in and have a valid subscription.
SUSE Package Hub 15.6 s390x
-
Packagespython-Django
A high-level Python Web frameworkpython311-Django4.2.11-150600.3.6.1 lock src
A high-level Python Web framework4.2.11-150600.3.6.1 lock rpm
SUSE Package Hub 15.6 aarch64
-
Packagespython-Django
A high-level Python Web frameworkpython311-Django4.2.11-150600.3.6.1 lock src
A high-level Python Web framework4.2.11-150600.3.6.1 lock rpm
SUSE Package Hub 15.6 ppc64le
-
Packagespython-Django
A high-level Python Web frameworkpython311-Django4.2.11-150600.3.6.1 lock src
A high-level Python Web framework4.2.11-150600.3.6.1 lock rpm
SUSE Package Hub 15.6 x86_64
-
Packagespython-Django
A high-level Python Web frameworkpython311-Django4.2.11-150600.3.6.1 lock src
A high-level Python Web framework4.2.11-150600.3.6.1 lock rpm