Skip to content
OpenAdvisories
High RHSA-2024:0212 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-django) security update

Published Sep 18, 2024 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 17 openstack:17.1::el9 python-django 0:2.2.24-5.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 python3-django 0:2.2.24-5.el9ost

Vulnerabilities 1

  • High 7.5
    CVE-2023-36053

    Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

    In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

    python-django django python-django Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2218004
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0212.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-36053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-36053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-36053
  • article
    https://www.djangoproject.com/weblog/2023/jul/03/security-releases/