-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 07 May 2025 09:27:26 -0700
Source: python-django
Architecture: source
Version: 3:5.2.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1104872
Changes:
python-django (3:5.2.1-1) experimental; urgency=medium
.
* New upstream security release:
.
- CVE-2025-32873: Denial-of-service possibility in strip_tags()
.
django.utils.html.strip_tags() would be slow to evaluate certain inputs
containing large sequences of incomplete HTML tags. This function is used
to implement the striptags template filter, which was therefore also
vulnerable. strip_tags() now raises a SuspiciousOperation exception if it
encounters an unusually large number of unclosed opening tags.
.
(Closes: #1104872)
.
<https://www.djangoproject.com/weblog/2025/may/07/security-releases/>
Checksums-Sha1:
bb09ed045a745017911b8301027d124ff080a9e8 2783 python-django_5.2.1-1.dsc
c8c6571401bede943be6b1ca4babe93cf2612e16 10818735 python-django_5.2.1.orig.tar.gz
feb12576e7ffa0f41ff351dc76a0cbcd10ae7d37 30096 python-django_5.2.1-1.debian.tar.xz
48edea50e99170342a8f2ed80db5d589676954cc 9397 python-django_5.2.1-1_source.buildinfo
Checksums-Sha256:
3a916198824710e9ceac054feec156bbc69c8ac432863a41b3c3cdfa6c7665ce 2783 python-django_5.2.1-1.dsc
57fe1f1b59462caed092c80b3dd324fd92161b620d59a9ba9181c34746c97284 10818735 python-django_5.2.1.orig.tar.gz
289c4fa05e3fa1e8c79a76be388142ef987d153dc70a5958eff9c754a2f14743 30096 python-django_5.2.1-1.debian.tar.xz
e2e841b9e966d8eca1be91b5f0976d285eb2bc40d0c48b80a3ae8d353bf7bd40 9397 python-django_5.2.1-1_source.buildinfo
Files:
64ae950d20e25f1f9bc5e9afb5c1d01e 2783 python optional python-django_5.2.1-1.dsc
317174c6e0593c40e58ec1bd428b1091 10818735 python optional python-django_5.2.1.orig.tar.gz
bf80257ae4ad41ad98d313b4e5d1a42f 30096 python optional python-django_5.2.1-1.debian.tar.xz
9b177edac3cfbb765638e088bd11d74f 9397 python optional python-django_5.2.1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=L4d9
-----END PGP SIGNATURE-----
Attachment:
pgpWeSWVcDj7G.pgp
Description: PGP signature