SUSE-SU-2024:0875-1

Details

This update for python-Django fixes the following issues:

CVE-2024-24680: Fixed a denial-of-service in intcomma template filter (bsc#1219683).
CVE-2024-27351: Fixed potential regular expression denial-of-service in django.utils.text.Truncator.words() (bsc#1220358).

Affected Packages

python-Django

SUSE HPE Helion OpenStack 8SUSE OpenStack Cloud 8SUSE OpenStack Cloud Crowbar 8

Fixed in:

1.11.29-3.59.3

venv-openstack-horizon-hpe

SUSE HPE Helion OpenStack 8

Fixed in:

12.0.5~dev6-14.54.4

venv-openstack-horizon-hpe-x86_64

SUSE HPE Helion OpenStack 8

Fixed in:

12.0.5~dev6-14.54.4

venv-openstack-horizon

SUSE OpenStack Cloud 8

Fixed in:

12.0.5~dev6-14.54.5

venv-openstack-horizon-x86_64

SUSE OpenStack Cloud 8

Fixed in:

12.0.5~dev6-14.54.5

References