RHSA-2024:9481: Moderate: Red Hat OpenStack Platform 18.0.3 (python-django) security update
Django is a high-level Python Web framework that encourages rapiddevelopment and a clean, pragmatic design. It focuses on automating as muchas possible and adhering to the DRY (Don't Repeat Yourself) principle.Security Fix(es): Potential denial-of-service in django.utils.html.urlize() (CVE-2024-38875) Potential denial-of-service in django.utils.translation.getsupportedlanguagevariant() (CVE-2024-39614) Username enumeration through timing difference for users with unusable passwords (CVE-2024-39329) Potential directory-traversal in django.core.files.storage.Storage.save() (CVE-2024-39330)For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage listed in the References section.
Other sources
Moderate: Red Hat OpenStack Platform 18.0.3 (python-django) security update
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:9481?
The severity of RHSA-2024:9481 is classified as having potential denial-of-service vulnerabilities.
How do I fix RHSA-2024:9481?
You can fix RHSA-2024:9481 by updating to the specified version 3.2.12-8.el9 of python-django or python3-django.
What software is affected by RHSA-2024:9481?
The affected software includes Red Hat OpenStack Services on OpenShift as well as specific versions of the python-django and python3-django packages.
When was RHSA-2024:9481 released?
RHSA-2024:9481 was released in response to security vulnerabilities discovered in the Django framework.
Who can provide support for RHSA-2024:9481?
Support for RHSA-2024:9481 can be obtained from Red Hat through their advisory and support channels.