SUSE-SU-2019:2180-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:2180-1

Related

Published

2019-08-19T14:48:36Z

Modified

2019-08-19T14:48:36Z

Summary

Security update for python-Django

Details

This update for python-Django fixes the following issues:

CVE-2019-14232: Fixed a denial of service in 'django.utils.text.Truncator' (bsc#1142880).
CVE-2019-14233: Fixed a denial of service in strip_tags() (bsc#1142882).
CVE-2019-14234: Fixed an SQL injection in key and index lookups for 'JSONField'/'HStoreField' (bsc#1142883).
CVE-2019-14235: Fixed a potential memory exhaustion in 'django.utils.encoding.uritoiri()' (bsc#1142885).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.19-3.15.1

{
    "binaries": [
        {
            "python-Django": "1.8.19-3.15.1"
        }
    ]
}