[ubuntu/focal-updates] python-django 2:2.2.12-1ubuntu0.26 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Wed Dec 4 18:28:55 UTC 2024
python-django (2:2.2.12-1ubuntu0.26) focal-security; urgency=medium
* SECURITY UPDATE: Potential denial-of-service in
django.utils.html.strip_tags()
- debian/patches/CVE-2024-53907.patch: mitigated potential DoS in
strip_tags() in django/utils/html.py, tests/utils_tests/test_html.py.
- CVE-2024-53907
* Fix FTBFS caused by more restrictive mail parsing in python3.8 security
update
- fix_ftbfs_mail_test.patch: used email.headerregistry.parser for
parsing emails in sanitize_address() in django/core/mail/message.py,
tests/mail/tests.py.
Date: 2024-11-28 12:51:28.233120+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.26
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list