linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-django/CVE-2024-41990.patch, branch kirkstone-nextMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=kirkstone-next2025-01-23T00:22:56+00:00python3-django: Fix CVE-2024-419902025-01-23T00:22:56+00:00Soumya Sambusoumya.sambu@windriver.com2025-01-10T13:17:58+00:00urn:sha1:4e8fa78778944fa005ee94a7346a4d0d9e2c7405
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
The urlize() and urlizetrunc() template filters are subject to a potential
denial-of-service attack via very large inputs with a specific sequence of
characters.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-41990
Upstream-patch:
https://github.com/django/django/commit/d0a82e26a74940bf0c78204933c3bdd6a283eb88
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>