diff options
| author | Soumya Sambu <soumya.sambu@windriver.com> | 2025-01-10 13:17:58 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2025-01-22 19:22:56 -0500 |
| commit | 4e8fa78778944fa005ee94a7346a4d0d9e2c7405 (patch) | |
| tree | 1cf0f7c36d18aa1e6949861880899f2288923ae1 /meta-python/recipes-devtools/python/python3-django/CVE-2024-45230.patch | |
| parent | 46701493ac4201c76aad1aeaf28e9b35851398ec (diff) | |
| download | meta-openembedded-4e8fa78778944fa005ee94a7346a4d0d9e2c7405.tar.gz | |
python3-django: Fix CVE-2024-41990
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
The urlize() and urlizetrunc() template filters are subject to a potential
denial-of-service attack via very large inputs with a specific sequence of
characters.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-41990
Upstream-patch:
https://github.com/django/django/commit/d0a82e26a74940bf0c78204933c3bdd6a283eb88
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-django/CVE-2024-45230.patch')
0 files changed, 0 insertions, 0 deletions