gpp_maybe Security update for python-django

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2318

This update for python-Django fixes the following issues - CVE-2026-6873: signed cookie salt namespace collision in `django.http.HttpRequest.get_signed_cookie` (bsc#1267578). - CVE-2026-7666: potential unencrypted email transmission via `STARTTLS` in the SMTP backend (bsc#1267579). - CVE-2026-8404: potential exposure of private data via case-sensitive `Cache-Control` directives in `UpdateCacheMiddleware` (bsc#1267580). - CVE-2026-35193: potential exposure of private data via missing `Vary: Authorization` in `UpdateCacheMiddleware` (bsc#1267576). - CVE-2026-48587: potential exposure of private data via whitespace padding in `Vary` header (bsc#1267577).

• Release Date
  Jun 9 2026
• References
  Bugzilla: 1267576, 1267577, 1267578, 1267579, 1267580
  CVEs: CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193, CVE-2026-48587
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.7 aarch64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.59.1 lock rpm