critical Security update for python-django

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3503

This update for python-Django fixes the following issues: - CVE-2026-15307: server-side file-write and request forgery via spatial lookups (bsc#1272997). - CVE-2026-15337: potential denial-of-service vulnerability in `check_for_language()` (bsc#1272998). - CVE-2026-15830: potential denial-of-service vulnerability via nested geometry collections (bsc#1272999). - CVE-2026-15920: potential cross-site scripting via `URLField` values in the admin (bsc#1273000).

• Release Date
  Aug 5 2026
• References
  Bugzilla: 1272997, 1272998, 1272999, 1273000
  CVEs: CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, CVE-2026-15920
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Package Hub 15.7 x86_64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.65.1 lock rpm