-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 03 Jul 2023 20:34:24 +0100 Source: python-django Built-For-Profiles: nocheck Architecture: source Version: 3:3.2.20-1 Distribution: unstable Urgency: high Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1040225 Changes: python-django (3:3.2.20-1) unstable; urgency=high . * New upstream security release: . - CVE-2023-36053: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator. . EmailValidator and URLValidator were subject to potential regular expression denial of service attack via a very large number of domain name labels of emails and URLs. (Closes: #1040225) Checksums-Sha1: 286b4c4566f154398dab8cdbf69ef92d4c39097b 2807 python-django_3.2.20-1.dsc 423cf6233f07ce8c8d9c0d35eb40ca5bcead7963 9831078 python-django_3.2.20.orig.tar.gz 311f1c69944d48f3bf9ffbeb504e771dc6e2e7fd 38128 python-django_3.2.20-1.debian.tar.xz 2fe689d46e0245f06bf99fb3d52a35dd99d5bc0f 7942 python-django_3.2.20-1_amd64.buildinfo Checksums-Sha256: 65090780ea7c9d6f7a7fa4708fbf329aae05dfda8d0933989196af0cc2aef647 2807 python-django_3.2.20-1.dsc dec2a116787b8e14962014bf78e120bba454135108e1af9e9b91ade7b2964c40 9831078 python-django_3.2.20.orig.tar.gz 11196ba770ed5a83af943fa96e6f9e1736171be0984bd80753ed1a63d6f87838 38128 python-django_3.2.20-1.debian.tar.xz 1a58fd9080c1c5d008453ff48d4039aa3203847118e32d65e8357a0864f8f373 7942 python-django_3.2.20-1_amd64.buildinfo Files: d262d7c0cfde9a9e33952380a6b2ac58 2807 python optional python-django_3.2.20-1.dsc effe6b4ccf2606818578b9e9a94d01e0 9831078 python optional python-django_3.2.20.orig.tar.gz 11e11076e22506ed9b7eeac37eb5eda6 38128 python optional python-django_3.2.20-1.debian.tar.xz 602c5a66164a1ce7f1d1987fa736897b 7942 python optional python-django_3.2.20-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmSjJFwACgkQHpU+J9Qx HljavBAAoInKrzXRN6ZasRA6cRiAQm1yp3ou4hlyQXuQnvKB5N67+aysXmyE0xJP P47S9vUSwmZDat4wjdO+TzcyCZh8BFlZ1Imx2sBHRJHNSJEJtPoFlvzrFs1akJHo d0bSppaSB3yW2GwzLQo+8jdVGw6A84FivDXVAwDBICV5Rb7YqEc0L2B/AXfo2Sga JpfMP1oadIBqKc2bxPR+GcPqJGRYWTicXiAKg0Vo9S9dZxOWIEw6o1x8EUBtLylk cweYaNPKl9bMPhSuWnFRHXUoNhmxcJ5yJyu7VwgNoApUI+qKoxR0oJ+UeAq1+vo8 TqycKCIr2qPOncjaPc1yxWqTHJHAa42oj6Jif+D6HFXpa2tm7cIdFVSuUk8pAWX+ k9sFkBnVurJaUCovlp+/MbZt+596Swdw0iVC3636pHtXAMw7It0F9Jf1vj/6ymFE hPVu6FAivsgUgpNZaghlOnCDoQMIEL4RsIc0yS3/jU5Obzzc71FO+ACk+CTfPCm0 EB57qeDwuAX+v1AAT/SkGyQRBkpZAQfrJRb17XWt6HObUhlGrMjNY48QtBS4MPDu +apArFyMUf21E1nmBBZ+qpMjWFOK8QhHhfadSwBMzFQldYgsoHNRmEENe0YcmC3v 0LiRPd/RwLpWfbRRbWMIpAh9R/JI7vwBkUmv0JQ3CJq+r/9v5Y8= =Dmxk -----END PGP SIGNATURE-----