Security update for python-djangorestframework
This update for python-djangorestframework fixes the following issues:
- CVE-2026-73229: insufficient checks in renderers can lead to data
disclosure via 400 Bad Request HTML responses (boo#1275005)
- CVE-2026-73228: `DATA_UPLOAD_MAX_MEMORY_SIZE` protection bypass via
oversized request bodies can lead to DoS due to additional memory
and CPU consumption (boo#1275006)
-
Submitted by
Markéta Machová (mcalabkova)
Fixed bugs
bnc#1275006
VUL-0: CVE-2026-73228: python-djangorestframework, python3-djangorestframework: `DATA_UPLOAD_MAX_MEMORY_SIZE` protection bypass via oversized request bodies can lead to DoS due to additional memory and CPU consumption
bnc#1275005
VUL-0: CVE-2026-73229: python-djangorestframework, python3-djangorestframework: insufficient checks in renderers can lead to data disclosure via 400 Bad Request HTML responses
