Jonathan@BluMarble

Just noticed an urgent security update available on the django website. The django team’s description of the vulnerability:

Django’s forms library included field types which perform regular-expression-based validation of email addresses and URLs. Certain addresses/URLs could trigger a pathological performance case in this regular expression, resulting in the server process/thread becoming unresponsive, and consuming excessive CPU over an extended period of time. If deliberately triggered, this could result in an effective denial-of-service attack.

If you using django 1.0 or 1.1, its advisable to install it. Visit http://www.djangoproject.com/weblog/2009/oct/09/security/ for more information and patch downloads.