Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 2025-0095: python-django Security Advisory Updates

mageia
Calendar Grey March 12, 2025
Dist Mageia Esm H88
Django security advisory for potential DoS attack revealed in versions prior to 5.1.7, requiring attention by Mageia users.
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20

Summary

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings. (CVE-2025-26699)

References

- https://bugs.mageia.org/show_bug.cgi?id=34073

- https://ubuntu.com/security/notices/USN-7335-1

- https://www.cve.org/CVERecord?id=CVE-2025-26699

Topics%20covered

Topics Covered

security advisory security update denial-of-service python-django mageia

Resolution

SRPMS

- 9/core/python-django-4.1.13-1.3.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 12 Mar 2025
URL: https://advisories.mageia.org/MGASA-2025-0095.html
Type: security
CVE: CVE-2025-26699

Topics%20covered

Topics Covered

security advisory security update denial-of-service python-django mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here