-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Jan 2025 12:32:26 +0000 Source: python-django Architecture: source Version: 2:2.2.28-1~deb11u5 Distribution: bullseye-security Urgency: high Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1093049 Changes: python-django (2:2.2.28-1~deb11u5) bullseye-security; urgency=high . * CVE-2024-56374: The lack of upper-bound limit enforcement in IPv6 validation could have led to a potential denial-of-service attack. The undocumented and private clean_ipv6_address and is_valid_ipv6_address functions were vulnerable, as was the GenericIPAddressField form field. (Closes: #1093049) Checksums-Sha1: 9524b08c942656e360a9cce0c4d857310903e851 2811 python-django_2.2.28-1~deb11u5.dsc 0661bddaeca016d84abc4c808c1c677cd7d4aa7b 9187543 python-django_2.2.28.orig.tar.gz 854068b267ddad63fa4f16975664cb8c7b8b1bbf 45744 python-django_2.2.28-1~deb11u5.debian.tar.xz d270b25c62d7a5035ad1fe3309a70bd3e75dec3f 14294 python-django_2.2.28-1~deb11u5_amd64.buildinfo Checksums-Sha256: 751c026a2cfc06dd1e939dd3aef10ee1e0ebf410849e935ac2082eab708bd3b5 2811 python-django_2.2.28-1~deb11u5.dsc 0200b657afbf1bc08003845ddda053c7641b9b24951e52acd51f6abda33a7413 9187543 python-django_2.2.28.orig.tar.gz 1ba8a428276ec8e33aab65328b94350949aa221b672ec24def7defc178d7cabb 45744 python-django_2.2.28-1~deb11u5.debian.tar.xz 0d38578cf4da78a80c9456fb57e0c7bc909094e39ca91a8885fd684504b31582 14294 python-django_2.2.28-1~deb11u5_amd64.buildinfo Files: ed4370f171cf753f9fb3c62e99105b62 2811 python optional python-django_2.2.28-1~deb11u5.dsc 62550f105ef66ac7d08e0126f457578a 9187543 python optional python-django_2.2.28.orig.tar.gz ff207bee81e51ddbc37470abded7eba4 45744 python optional python-django_2.2.28-1~deb11u5.debian.tar.xz 514cbc5812f5666a63111dc7e45db071 14294 python optional python-django_2.2.28-1~deb11u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmeSVREACgkQHpU+J9Qx HlhsmQ/+OXyvzQ9ShBfjkj1HV2bqupxC/CmXVI1E30VfamMBfRmZEiyCK2WV5Tlk zOvv8EVHsenufgWFXyytyLjVvy5+uKJbTL3fIhSRR5i2sE6kGxigfTZXZK7Hqkwd uZIVJtldLbpEODV17jcDojhlSgrdu2Nwlrk3WuiEHoTq7wqI7L8awD+/40MQ27rC +UM99cDqVSutYJGuoMUFrOhkEctHn0G5xFEj9qOiSqKv236iSb9M3IGoFqThVNwB kB7qlEs0RZHZ2Pn6XeI0oW0mgi79tvgSKRG2YkKZ2Th3dkFQFe5p/TUuGo63OIbW iJJJqSClNzWdsW8HQyZLVFYMz2cpq8uKHYu2TNSPPE1TtkfmoloOduqRHmX8EAZM gDXZYSctCnQtRX2B7kKlrIZxbtENbmrszgOkSvsThZKgWXnsc74QDGNxdOSZKVoV bMIjEsAFVYgYtQygqFmsIHLKsUpiLK5f2sLyx7wkWTnZ83yvhS2wmj9YJXTXlj4R Y/KK2wuprKlshacMmVwChQKRmdFQJTeH2d4K/OSKhzSaZCZEUUd2wC2WrpfPlO/y ZOlfDEY1XfYPS+VcuZIVBngm+6im56deVkrIGuKzwVwo9KKVxOpA51Io4mqWYb6q ZtnXpR4h+p5I8g7F4ioFn008ty76XsmuZTOREYfSQ2WpKbA8oVg= =cOKk -----END PGP SIGNATURE-----