Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead-next 2023-11-17T19:38:27+00:00 2023-11-17T19:38:27+00:00 Joe Slater joe.slater@windriver.com 2023-11-16T21:43:35+00:00 urn:sha1:13057d943a517e2ed12184150ad4dc8ad1fb5c4c Fixes CVE-2023-36053 and CVE-2023-41164 Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-07-21T02:08:57+00:00 Trevor Gamblin tgamblin@baylibre.com 2023-07-18T15:00:54+00:00 urn:sha1:84c611db3472473b0468d390c12d70cd7d87dfc3 Changelog: https://docs.djangoproject.com/en/4.2/releases/4.2.3/ Django 4.2.3 fixes a security issue with severity “moderate” and several bugs in 4.2.2. CVE-2023-36053: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator EmailValidator and URLValidator were subject to potential regular expression denial of service attack via a very large number of domain name labels of emails and URLs. Bugfixes - Fixed a regression in Django 4.2 that caused incorrect alignment of timezone warnings for DateField and TimeField in the admin (#34645). - Fixed a regression in Django 4.2 that caused incorrect highlighting of rows in the admin changelist view when ModelAdmin.list_editable contained a BooleanField (#34638). Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>