django.git/docs/releases/4.0.9.txt, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2023-02-01T08:44:04Z Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language. 2023-02-01T08:44:04Z Nick Pope nick@nickpope.me.uk 2023-01-25T11:21:48Z urn:sha1:8c660fb59239828583f17cdede3b64f208b8752c The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue. Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17. 2023-01-25T11:26:00Z Carlton Gibson carlton.gibson@noumenal.es 2023-01-25T11:26:00Z urn:sha1:d8e1442ce2c56282785dd806e5c1147975e8c857 Set date and added stub release notes for 4.1.6, 4.0.9, and 3.2.17. 2023-01-25T10:57:04Z Carlton Gibson carlton.gibson@noumenal.es 2023-01-25T10:57:04Z urn:sha1:1df963ad2476726d63be132c0cee47e07b8250d7