-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 15 Jan 2025 17:48:05 +0000
Source: python-django
Built-For-Profiles: nocheck
Architecture: source
Version: 3:5.1.5-1
Distribution: experimental
Urgency: high
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1093049
Changes:
python-django (3:5.1.5-1) experimental; urgency=high
.
* New upstream security release. (Closes: #1093049)
.
- CVE-2024-56374: Potential denial-of-service vulnerability in IPv6
validation.
.
A lack of upper bound limit enforcement in strings passed when performing
IPv6 validation could have led to a potential denial-of-service (DoS)
attack. The undocumented and private functions clean_ipv6_address and
is_valid_ipv6_address were vulnerable, as was the GenericIPAddressField
form field, which has now been updated to define a max_length of 39
characters. The GenericIPAddressField model field was not affected.
.
<https://www.djangoproject.com/weblog/2025/jan/14/security-releases/>
Checksums-Sha1:
05454ea894def9bf6587ccc1f785d71adba52cd2 2783 python-django_5.1.5-1.dsc
b41593f64adf86667e6a36c97aebe7ec832fc474 10700031 python-django_5.1.5.orig.tar.gz
3b20a874feb6417ef6dbb3c53aa99bf706fae243 29740 python-django_5.1.5-1.debian.tar.xz
7be826beb6fd90e535a2c4b53fa2c80571528907 8561 python-django_5.1.5-1_amd64.buildinfo
Checksums-Sha256:
0682c7dbea59a0e0394ffdd475c3df7d3d492bb1662c5822640a4693472124a0 2783 python-django_5.1.5-1.dsc
19bbca786df50b9eca23cee79d495facf55c8f5c54c529d9bf1fe7b5ea086af3 10700031 python-django_5.1.5.orig.tar.gz
408129ba9041fddde85a604b9121bcc4517d794ab3b174e4f281874967c03d9d 29740 python-django_5.1.5-1.debian.tar.xz
e4d5f9d182fa0f52154e07dc6168070b276534f13041bf1da0340e8968e54c44 8561 python-django_5.1.5-1_amd64.buildinfo
Files:
ce0373b8a5924a4362a29e95e2427e5c 2783 python optional python-django_5.1.5-1.dsc
272e951dbc4ccb7854c5a69aa5650749 10700031 python optional python-django_5.1.5.orig.tar.gz
8eb945bbc7c2a47211e3887383bd7311 29740 python optional python-django_5.1.5-1.debian.tar.xz
4e49f03c1f524287a4a99b7f56014621 8561 python optional python-django_5.1.5-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=sUOr
-----END PGP SIGNATURE-----
Attachment:
pgpf0YO1Bo1QZ.pgp
Description: PGP signature