Skip to content
OpenAdvisories
Medium RHSA-2025:4187 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-django) security update

Published Apr 25, 2025 · Updated Jun 3, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 17 openstack:17.1::el9 python-django 0:2.2.24-9.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 python3-django 0:2.2.24-9.el9ost

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-27351

    Regular expression denial-of-service in Django

    In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a craft…

    python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2266045
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4187.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-27351
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-27351
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-27351
  • article
    https://www.djangoproject.com/weblog/2024/mar/04/security-releases/