openSUSE-SU-2021:0322-1

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2021:0322-1

Related

Published

2021-02-21T22:33:07Z

Modified

2021-02-21T22:33:07Z

Summary

Security update for python-djangorestframework

Details

This update for python-djangorestframework fixes the following issues:

Update to 3.11.2

Security: Drop urlizequotedlinks template tag in favour of Django's built-in urlize. Removes a XSS vulnerability for some kinds of content in the browsable API. (boo#1177205, CVE-2020-25626)
update Django for APIs book to 3.0 edition
decode base64 credentials as utf8; adjust tests
Remove compat urls for Django < 2.0

References

Affected packages

Name: python-djangorestframework
Purl: pkg:rpm/opensuse/python-djangorestframework&distro=openSUSE%20Leap%2015.2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.11.2-lp152.2.3.1

{
    "binaries": [
        {
            "python3-djangorestframework": "3.11.2-lp152.2.3.1"
        }
    ]
}

Name: python-djangorestframework-test
Purl: pkg:rpm/opensuse/python-djangorestframework-test&distro=openSUSE%20Leap%2015.2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.11.2-lp152.2.3.1

{
    "binaries": [
        {
            "python3-djangorestframework": "3.11.2-lp152.2.3.1"
        }
    ]
}