openSUSE-SU-2021:0338-1

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2021:0338-1

Related

Published

2021-02-25T09:05:18Z

Modified

2021-02-25T09:05:18Z

Summary

Security update for python-djangorestframework

Details

This update for python-djangorestframework fixes the following issues:

Update to 3.11.2

Security: Drop urlizequotedlinks template tag in favour of Django's built-in urlize. Removes a XSS vulnerability for some kinds of content in the browsable API. (boo#1177205, CVE-2020-25626)
update Django for APIs book to 3.0 edition
decode base64 credentials as utf8; adjust tests
Remove compat urls for Django < 2.0

This update was imported from the openSUSE:Leap:15.2:Update update project.

References

Affected packages

Name: python-djangorestframework
Purl: pkg:rpm/suse/python-djangorestframework&distro=SUSE%20Package%20Hub%2015%20SP2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.11.2-bp152.2.3.1

{
    "binaries": [
        {
            "python3-djangorestframework": "3.11.2-bp152.2.3.1"
        }
    ]
}

Name: python-djangorestframework-test
Purl: pkg:rpm/suse/python-djangorestframework-test&distro=SUSE%20Package%20Hub%2015%20SP2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.11.2-bp152.2.3.1

{
    "binaries": [
        {
            "python3-djangorestframework": "3.11.2-bp152.2.3.1"
        }
    ]
}