(RHSA-2020:4390) Moderate: python-django security update

Django is a high-level Python Web framework that encourages rapid
development and a clean, pragmatic design. It focuses on automating as much
as possible and adhering to the DRY (Don’t Repeat Yourself) principle.

Security Fix(es):

• Incorrect HTTP detection with reverse-proxy connecting via HTTPS
  (CVE-2019-12781)

• backtracking in a regular expression in django.utils.text.Truncator leads
  to DoS (CVE-2019-14232)

• the behavior of the underlying HTMLParser leading to DoS (CVE-2019-14233)

• SQL injection possibility in key and index lookups for
  JSONField/HStoreField (CVE-2019-14234)

• Potential memory exhaustion in django.utils.encoding.uri_to_iri()
  (CVE-2019-14235)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.