Update Info

openSUSE-2024-272


Security update for python-Django


Type: security
Severity: important
Issued: 2024-08-30
Description:
This update for python-Django fixes the following issues:

* CVE-2024-42005: Fixed potential SQL injection in QuerySet.values() and values_list() (boo#1228629)
* CVE-2024-41989: Fixed memory exhaustion in django.utils.numberformat.floatformat() (boo#1228630)
* CVE-2024-41990: Fixed potential denial-of-service vulnerability in django.utils.html.urlize() (boo#1228631)
* CVE-2024-41991: Fixed potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget (boo#1228632)


              

Packages


  • python-Django-2.2.28-bp155.7.15.1