-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 02 Mar 2025 15:58:40 +0000
Source: python-django
Architecture: source
Version: 3:4.2.19-1~bpo12+1
Distribution: bookworm-backports
Urgency: high
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Closes: 1093049
Changes:
python-django (3:4.2.19-1~bpo12+1) bookworm-backports; urgency=medium
.
* Rebuild for bookworm-backports.
.
python-django (3:4.2.19-1) unstable; urgency=medium
.
* New upstream bugfix release.
<https://www.djangoproject.com/weblog/2025/feb/05/bugfix-releases/>
.
python-django (3:4.2.18-1) unstable; urgency=high
.
* New upstream security release. (Closes: #1093049)
.
- CVE-2024-56374: Potential denial-of-service vulnerability in IPv6
validation.
.
A lack of upper bound limit enforcement in strings passed when performing
IPv6 validation could have led to a potential denial-of-service (DoS)
attack. The undocumented and private functions clean_ipv6_address and
is_valid_ipv6_address were vulnerable, as was the GenericIPAddressField
form field, which has now been updated to define a max_length of 39
characters. The GenericIPAddressField model field was not affected.
.
<https://www.djangoproject.com/weblog/2025/jan/14/security-releases/>
Checksums-Sha1:
dbae5a53e994151f24d2e5f392fb2865fe13add6 2925 python-django_4.2.19-1~bpo12+1.dsc
ae9242e08a672e60d8ded01e9c19c5b8920ec848 33444 python-django_4.2.19-1~bpo12+1.debian.tar.xz
Checksums-Sha256:
c5f8f13df50bef0cd3976fa8a1ec80b59e66cc50c1bd407a677b91990d3b70db 2925 python-django_4.2.19-1~bpo12+1.dsc
defe1b014664191eeb139df830d1f219e43c6a251c758286412c943c4a539a77 33444 python-django_4.2.19-1~bpo12+1.debian.tar.xz
Files:
a202452cfcb8789655ee54578b4a067a 2925 python optional python-django_4.2.19-1~bpo12+1.dsc
31d124f7910886bbfd6118b18fa5b0e6 33444 python optional python-django_4.2.19-1~bpo12+1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAmfEgnQACgkQOTWH2X2G
UAuk2w/8CC5NhdKNYKgWZKR49wQOUn3jckL8jsRZX/2CDX/ziVvoSHylhzj55/Qy
nFLanEMa9eqRGabM2NNZaunka+W+pPS/fqHDW9R0k5JVYFoBCQUu1mYETahnFSWx
NqnxDZX9bZ29sCjdQ9rqYrEd+3Xp5HAaaQOBfupaPoX1ugG+8DDPISbauM31VXlP
HD2qdAdAaaxuONYfvxKbeZ8QSpyeFLvZ4xTifqE+GAKgzZeJvak7KAPthYa1ypwW
Za0/jZlDMW1qzaH5HRoBrjT/97lBrX5P3/ppc7OaNzLFz0LZlMlJSA9NFJrBDAj9
6f6U8EfY5XWI71XLkFqJ/5+rd81VMlS1xazD92nZIHBBM67tw3iZp4wxRD2ILX19
lKUYcERy1VqZOeMB6Wf1DeuHnV/iUXge3RbouZsp9esCPQLww0AV3iOfylJcSf30
fDRQIgHWtN5791WeRRu5dBAVM5l/7323P61HQvvUPmJiFXrogg0xSV0hG9vFPp6K
LlC3klI+oKtScgKXWEP6WKNKvtTRmtu6wB8MhYE5HQE9JMF4Wnv065tHHK1NFO6H
PTPAx31KdIDasSpMDXUPhP065FIEi4AqZvt++/0EHx9Pm71FANjsfcqWG1uHK3t5
iZKe1NUSa+KKU090tasZQrne+YbvOgZj5OaehDnl68MEVwc7x2E=
=grYJ
-----END PGP SIGNATURE-----
Attachment:
pgprlJHEUhtWy.pgp
Description: PGP signature