Bug 913620 (CVE-2023-41164)

Summary:	<dev-python/django-{4.2.5,4.1.11,3.2.21}: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri()
Product:	Gentoo Security	Reporter:	Michał Górny <mgorny>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [glsa?]
Package list:		Runtime testing required:	---
Bug Depends on:	913617, 913618, 913619
Bug Blocks:

Description Michał Górny archtester

2023-09-04 12:50:14 UTC

CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri()¶

django.utils.encoding.uri_to_iri() was subject to potential denial of service attack via certain inputs with a very large number of Unicode characters.

https://docs.djangoproject.com/en/4.2/releases/4.2.5/

Comment 1 Michał Górny archtester

2023-09-05 04:58:06 UTC

cleanup done.