-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 26 May 2025 01:50:04 +0100
Source: python-django
Architecture: source
Version: 3:4.2.21-1~bpo12+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Closes: 1104872
Changes:
python-django (3:4.2.21-1~bpo12+1) bookworm-backports; urgency=medium
.
* Rebuild for bookworm-backports.
.
python-django (3:4.2.21-1) unstable; urgency=medium
.
* New upstream security release:
.
- CVE-2025-32873: Denial-of-service possibility in strip_tags()
.
django.utils.html.strip_tags() would be slow to evaluate certain inputs
containing large sequences of incomplete HTML tags. This function is used
to implement the striptags template filter, which was therefore also
vulnerable. strip_tags() now raises a SuspiciousOperation exception if it
encounters an unusually large number of unclosed opening tags.
.
(Closes: #1104872)
.
<https://www.djangoproject.com/weblog/2025/may/07/security-releases/>
.
* Bump Standards-Version to 4.7.2.
* Add pybuild-plugin-pyproject to Build-Depends.
Checksums-Sha1:
271872af37bb9ae66f45f35f1b9b5bd2fd4bc731 2951 python-django_4.2.21-1~bpo12+1.dsc
29453a9932c6b707b3ac0abe51eee63d998bde84 33680 python-django_4.2.21-1~bpo12+1.debian.tar.xz
Checksums-Sha256:
ef0781a274f67eb096904a7cfe368c3baaa8d565e244760b43f33daa149df8ff 2951 python-django_4.2.21-1~bpo12+1.dsc
016bb701b2615e3491ed0010e9a079cbe485b1f14b92641c49669d7745e442b1 33680 python-django_4.2.21-1~bpo12+1.debian.tar.xz
Files:
2ff282f1744948bebf15e20f168f7a26 2951 python optional python-django_4.2.21-1~bpo12+1.dsc
69bb71cf8a73a64be6348e1d005c5734 33680 python optional python-django_4.2.21-1~bpo12+1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=HFaz
-----END PGP SIGNATURE-----
Attachment:
pgpWSDQ30gTSi.pgp
Description: PGP signature