OPENSUSE-SU-2023:0178-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 13 Jul 2023, 16:02
Last modified:04 Feb 2026, 03:06
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
13 Jul 2023, 16:02
Published
Vulnerability first disclosed
04 Feb 2026, 03:06
Last Modified
Vulnerability information updated
Description
Security update for python-Django This update for python-Django fixes the following issues: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742) - CVE-2023-24580: Fixed potential denial-of-service vulnerability in file uploads (boo#1208082) - CVE-2023-23969: Fixed potential denial-of-service via Accept-Language headers (boo#1207565) - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs (boo#1203793)
Affected Systems
- opensuse•python-Django&distro=openSUSE Leap 15.5
< 2.2.28-bp155.7.3.1
- suse•python-Django&distro=SUSE Package Hub 15 SP5
< 2.2.28-bp155.7.3.1
References (9)
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XIBAQZUQ2RHKRUEWEHTVUYM66J3IOWLL/
- https://bugzilla.suse.com/1203793
- https://bugzilla.suse.com/1207565
- https://bugzilla.suse.com/1208082
- https://bugzilla.suse.com/1212742
- https://www.suse.com/security/cve/CVE-2022-41323
- https://www.suse.com/security/cve/CVE-2023-23969
- https://www.suse.com/security/cve/CVE-2023-24580
- https://www.suse.com/security/cve/CVE-2023-36053