James Hilliard acfdec5515 package/python-django: security bump to version 5.0.11 ...

Fixes the following vulnerability:

CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation

Lack of upper bound limit enforcement in strings passed when performing IPv6
validation could lead to a potential denial-of-service attack.  The
undocumented and private functions clean_ipv6_address and
is_valid_ipv6_address were vulnerable, as was the
django.forms.GenericIPAddressField form field, which has now been updated to
define a max_length of 39 characters.

The django.db.models.GenericIPAddressField model field was not affected.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2025-01-31 19:25:56 +01:00

..

Config.in

…

python-django.hash

…

python-django.mk

…