critical Security update for python-django

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4285

This update for python-Django fixes the following issues: - CVE-2024-53907: Fixed denial-of-service in django.utils.html.strip_tags() (bsc#1234232) - CVE-2024-53908: Fixed SQL injection in HasKey(lhs, rhs) on Oracle (bsc#1234231)

• Release Date
  Dec 11 2024
• References
  Bugzilla: 1234232, 1234231
  CVEs: CVE-2024-53907, CVE-2024-53908
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Package Hub 15.6 aarch64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock rpm

SUSE Package Hub 15.6 ppc64le

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock rpm

SUSE Package Hub 15.6 s390x

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock rpm

SUSE Package Hub 15.6 x86_64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.12.1 lock rpm