---
title: "Nótaí scaoilte Django 5.1.5"
version: 6.0
locale: ga
source: https://docs.djangoproject.com/ga/6.0/releases/5.1.5/
canonical: https://djangodocs.dev/ga/6.0/releases/5.1.5/
---
# Nótaí scaoilte Django 5.1.5

*January 14, 2025*

Django 5.1.5 fixes a security issue with severity "moderate" and one bug in
5.1.4.

## CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation

Lack of upper bound limit enforcement in strings passed when performing IPv6
validation could lead to a potential denial-of-service attack. The undocumented
and private functions `clean_ipv6_address` and `is_valid_ipv6_address` were
vulnerable, as was the  [`django.forms.GenericIPAddressField`](/ga/6.0/ref/forms/fields/#django.forms.GenericIPAddressField) form field,
which has now been updated to define a `max_length` of 39 characters.

The [`django.db.models.GenericIPAddressField`](/ga/6.0/ref/models/fields/#django.db.models.GenericIPAddressField) model field was not
affected.

## Buigdheisiúcháin

- Socraigh timpiste agus imirce á chur i bhfeidhm le tagairtí don rogha Meta.index\_Together\` bainte (:ticket: 34856).