Update Info

openSUSE-2024-251


Security update for python-Django


Type: security
Severity: important
Issued: 2024-08-18
Description:
This update for python-Django fixes the following issues:

- CVE-2023-23969: Potential denial-of-service via Accept-Language headers (boo#1207565)
- CVE-2024-38875: Potential denial-of-service attack via certain inputs with a very large number of brackets (boo#1227590)
- CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords (boo#1227593)
- CVE-2024-39330: Potential directory traversal in django.core.files.storage.Storage.save() (boo#1227594)
- CVE-2024-39614: Potential denial-of-service through django.utils.translation.get_supported_language-variant()  (boo#1227595)


              

Packages


  • python-Django-2.2.28-bp155.7.12.1