[SECURITY] Fedora 39 Update: python-django-4.2.6-1.fc39

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +13 more potentially affected by CVE-2023-44271 via pillow (3.4.2)

pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2023-44271 Sour...

arpegio (>=0.1.3, <=0.3.4), django-versatileimagefield (1.6.1) +2 more potentially affected by CVE-2023-44271 via pillow (3.3.3)

pillow PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - arpegio =0.1.3, =0.6.12a3, =0.6.12 Source cves: CVE-2023-44271 Source advisory: OSV:GHSA-8GHJ-P4VJ-MR35...

chromewhip (>=0.2.2, <=0.2.16), cloud-volume (>=0.6.12, <=0.8.1) +11 more potentially affected by CVE-2023-44271 via pillow (4.2.1)

pillow PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - chromewhip =0.2.2, =0.6.12, =4.4.1, =0.0.1a0, =0.9.0, =0.6.19a0, =0.3.5, =0.0.3, =11.0.0, =11.2.0 Source cves: CVE-2023-44271 Source advisory:...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-43665 via django (>=4.1.0a1, <=4.1.11)

django PYPI version =4.1.0a1, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-43665 Source advisory: OSV:GHSA-H8GC-PGJ2-VJM3...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-43665 via django (>=4.1.0a1, <=4.1.11)

django PYPI version =4.1.0a1, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-43665 Source advisory: GHSA-H8GC-PGJ2-VJM3...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +69 more potentially affected by CVE-2023-43665 via django (>=4.2.0a1, <=4.2.5)

django PYPI version =4.2.0a1, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =9.3.0, =9.3.1 and more Source cves: CVE-2023-43665 Source advisory: OSV:GHSA-H8GC-PGJ2-VJM3...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +166 more potentially affected by CVE-2023-43665 via django (>=3.2.0rc1, <=3.2.21)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-43665 Source advisory: OSV:GHSA-H8GC-PGJ2-VJM3...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +166 more potentially affected by CVE-2023-43665 via django (>=3.2.0rc1, <=3.2.21)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-43665 Source advisory: GHSA-H8GC-PGJ2-VJM3...

django-oscar (>=1.1.0, <=1.1.1), django-oscar-telegram-bot (>=0.1.0, <=0.5.0) +2 more potentially affected by CVE-2023-44271 via pillow (2.7.0)

pillow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-oscar =1.1.0, =0.1.0, =0.1.0, =0.1.1, =0.2.1 Source cves: CVE-2023-44271 Source advisory: OSV:GHSA-8GHJ-P4VJ-MR35...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2023-44271 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2023-44271 Source advisory: OSV:GHSA-8GHJ-P4VJ-MR35...

django-codenerix (1.0.0) potentially affected by CVE-2023-44271 via pillow (2.6.1)

pillow PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-codenerix 1.0.0 Source cves: CVE-2023-44271 Source advisory: OSV:GHSA-8GHJ-P4VJ-MR35...

GHSA-H8GC-PGJ2-VJM3 Django Denial-of-service in django.utils.text.Truncator

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars and words methods when used with html=True are subject to a potential DoS denial of service attack via certain inputs with very long, potentially malformed HTML text. The chars and words...

Django Denial-of-service in django.utils.text.Truncator

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars and words methods when used with html=True are subject to a potential DoS denial of service attack via certain inputs with very long, potentially malformed HTML text. The chars and words...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +69 more potentially affected by CVE-2023-43665 via django (>=4.2.0a1, <=4.2.5)

django PYPI version =4.2.0a1, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =9.3.0, =9.3.1 and more Source cves: CVE-2023-43665 Source advisory: GHSA-H8GC-PGJ2-VJM3...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-41164 via django (>=4.1.0, <=4.1.10)

django PYPI version =4.1.0, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-41164 Source advisory: OSV:GHSA-7H4P-27MH-HMRW...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-41164 via django (>=4.1.0, <=4.1.10)

django PYPI version =4.1.0, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-41164 Source advisory: GHSA-7H4P-27MH-HMRW...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: OSV:GHSA-7H4P-27MH-HMRW...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: GHSA-7H4P-27MH-HMRW...

admin-auth0 (>=0.1.1, <=0.1.5), arches (>=7.5.0a0, <=7.5.0a1) +67 more potentially affected by CVE-2023-41164 via django (>=4.2.0, <=4.2.4)

django PYPI version =4.2.0, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =9.3.0, =9.3.1 - dj-rest-kit 0.0.1a0 and more Source cves: CVE-2023-41164 Source advisory: OSV:GHSA-7H4P-27MH-HMRW...