Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

openSUSE 2024:0272-1 Important Security Update for Python-Django

opensuse
Calendar Grey August 30, 2024
Dist Opensuse Esm H88
The latest update for openSUSE's python-Django addresses various security vulnerabilities, reinforcing system security with crucial patches.
An update that fixes four vulnerabilities is now available

Description

This update for python-Django fixes the following issues:

* CVE-2024-42005: Fixed potential SQL injection in QuerySet.values() and

values_list() (boo#1228629)

* CVE-2024-41989: Fixed memory exhaustion in

django.utils.numberformat.floatformat() (boo#1228630)

* CVE-2024-41990: Fixed potential denial-of-service vulnerability in

django.utils.html.urlize() (boo#1228631)

* CVE-2024-41991: Fixed potential denial-of-service vulnerability in

django.utils.html.urlize() and AdminURLFieldWidget (boo#1228632)

Topics%20covered

Topics Covered

security advisory denial of service sql injection important python-django

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP5:

zypper in -t patch openSUSE-2024-272=1

Package List

References

https://www.suse.com/security/cve/CVE-2024-41989.html

https://www.suse.com/security/cve/CVE-2024-41990.html

https://www.suse.com/security/cve/CVE-2024-41991.html

https://www.suse.com/security/cve/CVE-2024-42005.html

https://bugzilla.suse.com/1228629

https://bugzilla.suse.com/1228630

https://bugzilla.suse.com/1228631

https://bugzilla.suse.com/1228632

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2024:0272-1
Rating: important
Affected Products: openSUSE Backports SLE-15-SP5 .

Topics%20covered

Topics Covered

security advisory denial of service sql injection important python-django

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here