SUSE-SU-2022:0103-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:0103-1

Related

Published

2022-01-18T08:36:18Z

Modified

2022-01-18T08:36:18Z

Summary

Security update for python-Django1

Details

This update for python-Django1 fixes the following issues:

CVE-2021-45115: Fixed denial-of-service possibility in UserAttributeSimilarityValidator (bsc#1194115).
CVE-2021-45116: Fixed potential information disclosure in dictsort template filter (bsc#1194117).
CVE-2021-45452: Fixed potential directory-traversal via Storage.save() (bsc#1194116).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.29-3.30.1

{
    "binaries": [
        {
            "python-Django1": "1.11.29-3.30.1"
        }
    ]
}

Name: python-Django1
Purl: pkg:rpm/suse/python-Django1&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.29-3.30.1

{
    "binaries": [
        {
            "python-Django1": "1.11.29-3.30.1"
        }
    ]
}