Debian LTS python-django DLA-4458-1 Multiple Security Issues

- - CVE-2024-39614: Fix a potential denial-of-service in
django.utils.translation.get_supported_language_variant. This
method was subject to a potential DoS attack when used with very
long strings containing specific characters. To mitigate this
vulnerability, the language code provided to
get_supported_language_variant is now parsed up to a maximum length
of 500 characters.

- - CVE-2024-45231: Potential user email enumeration via response
status on password reset. Due to unhandled email sending failures,
the django.contrib.auth.forms.PasswordResetForm class allowed
remote attackers to enumerate user emails by issuing password reset
requests and observing the outcomes. To mitigate this risk,
exceptions occurring during password reset email sending are now
handled and logged using the django.contrib.auth logger.

- - CVE-2024-42005: Potential SQL injection in QuerySet.values() and
values_list(). QuerySet.values() and values_list() methods on