Skip to content
OpenAdvisories
High RHSA-2024:2731 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-django) security update

Published Sep 16, 2024 · Updated Jun 3, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 17 openstack:17.1::el9 python-django 0:2.2.24-8.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 python3-django 0:2.2.24-8.el9ost

Vulnerabilities 1

  • High 7.5
    CVE-2024-24680

    Django denial-of-service attack in the intcomma template filter

    An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

    python-django django python-django py3-django Debian Ubuntu Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2261856
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2731.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-24680
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-24680
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-24680
  • advisory
    https://github.com/advisories/GHSA-xxj9-f6rv-m3x4
  • article
    https://www.djangoproject.com/weblog/2024/feb/06/security-releases/