mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-27 09:41:06 -09:00
a26e9e5b08
Fixes the following security issues:
- CVE-2022-22818: Possible XSS via {% debug %} template tag
The {% debug %} template tag didn't properly encode the current context,
posing an XSS attack vector.
In order to avoid this vulnerability, {% debug %} no longer outputs
information when the DEBUG setting is False, and it ensures all context
variables are correctly escaped when the DEBUG setting is True.
- CVE-2022-23833: Denial-of-service possibility in file uploads
Passing certain inputs to multipart forms could result in an infinite loop
when parsing files.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
6 lines
326 B
Plaintext
6 lines
326 B
Plaintext
# md5, sha256 from https://pypi.org/pypi/django/json
|
|
md5 1847b2f286930a9d84e820a757e3a7ec Django-3.2.12.tar.gz
|
|
sha256 9772e6935703e59e993960832d66a614cf0233a1c5123bc6224ecc6ad69e41e2 Django-3.2.12.tar.gz
|
|
# Locally computed sha256 checksums
|
|
sha256 b846415d1b514e9c1dff14a22deb906d794bc546ca6129f950a18cd091e2a669 LICENSE
|