[ubuntu/focal-updates] python-django 2:2.2.12-1ubuntu0.26 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Wed Dec 4 18:28:55 UTC 2024


python-django (2:2.2.12-1ubuntu0.26) focal-security; urgency=medium

  * SECURITY UPDATE: Potential denial-of-service in
    django.utils.html.strip_tags()
    - debian/patches/CVE-2024-53907.patch: mitigated potential DoS in
      strip_tags() in django/utils/html.py, tests/utils_tests/test_html.py.
    - CVE-2024-53907
  * Fix FTBFS caused by more restrictive mail parsing in python3.8 security
    update
    - fix_ftbfs_mail_test.patch: used email.headerregistry.parser for
      parsing emails in sanitize_address() in django/core/mail/message.py,
      tests/mail/tests.py.

Date: 2024-11-28 12:51:28.233120+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.26
-------------- next part --------------
Sorry, changesfile not available.


More information about the Focal-changes mailing list