An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding....

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Ubuntu:Pro:14.04:LTS python-django

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Ubuntu:16.04:LTS python-django

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-1ubuntu5.10"}]}]

Ubuntu:18.04:LTS python-django

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.11-1ubuntu1.5"}]}]

Ubuntu:20.04:LTS python-django

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.22-1ubuntu1"}]}]

参照URL

advisory ubuntu.com
report ubuntu.com
report cve.org