-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 15 Jan 2025 17:38:10 +0000
Source: python-django
Built-For-Profiles: nocheck
Architecture: source
Version: 3:4.2.18-1
Distribution: unstable
Urgency: high
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1093049
Changes:
python-django (3:4.2.18-1) unstable; urgency=high
.
* New upstream security release. (Closes: #1093049)
.
- CVE-2024-56374: Potential denial-of-service vulnerability in IPv6
validation.
.
A lack of upper bound limit enforcement in strings passed when performing
IPv6 validation could have led to a potential denial-of-service (DoS)
attack. The undocumented and private functions clean_ipv6_address and
is_valid_ipv6_address were vulnerable, as was the GenericIPAddressField
form field, which has now been updated to define a max_length of 39
characters. The GenericIPAddressField model field was not affected.
.
<https://www.djangoproject.com/weblog/2025/jan/14/security-releases/>
Checksums-Sha1:
e59fdea6003372e7b83aaa1bfc20efbe6f21eb03 2764 python-django_4.2.18-1.dsc
d5b343b598dcbf315d3eca933c965bee189b00fa 10428204 python-django_4.2.18.orig.tar.gz
10eadac2713bc1f800a6a7cac44ec57cea0f474f 33280 python-django_4.2.18-1.debian.tar.xz
c4966ce1917a9d2aa40b7124baafb2153f6b6ab7 8333 python-django_4.2.18-1_amd64.buildinfo
Checksums-Sha256:
c8d3738aefefd104aa71dba8e46a3de89c5197b263c639a5c8015288e6a06a86 2764 python-django_4.2.18-1.dsc
52ae8eacf635617c0f13b44f749e5ea13dc34262819b2cc8c8636abb08d82c4b 10428204 python-django_4.2.18.orig.tar.gz
d4559915b40d0ef539f63c17da443175cb59b4c493703041758984e38ad6bd5c 33280 python-django_4.2.18-1.debian.tar.xz
d3d692be16d9f2823fd4de91d66d287a78adc057336c6c9307a57ceca56d5cc9 8333 python-django_4.2.18-1_amd64.buildinfo
Files:
043f51c1d7dfd1be817efbd3a91c94f8 2764 python optional python-django_4.2.18-1.dsc
df7bf6c395e06c8e625860c5ad2e9fea 10428204 python optional python-django_4.2.18.orig.tar.gz
151f3b12673b85dab5f7d6d41fb98a4a 33280 python optional python-django_4.2.18-1.debian.tar.xz
a85267782a54ca397ede2a3d831267b4 8333 python optional python-django_4.2.18-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=QH43
-----END PGP SIGNATURE-----
Attachment:
pgpIgUf1q92Yv.pgp
Description: PGP signature