gpp_maybe Security update for python-django

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-440

This update for python-Django fixes the following issues: - CVE-2025-14550: Fixed potential denial-of-service via repeated headers when using ASGI(bsc#1257403) - CVE-2026-1312: Fixed potential SQL injection via QuerySet.order_by and FilteredRelation (bsc#1257408) - CVE-2026-1287: Fixed potential SQL injection in column aliases via control characters (bsc#1257407) - CVE-2026-1207: Fixed potential SQL injection via raster lookups on PostGIS (bsc#1257405) - CVE-2025-13473: Fixed username enumeration through timing difference in mod_wsgi authentication handler (bsc#1257401) - CVE-2026-1285: Fixed potential denial-of-service in django.utils.text.Truncator HTML methods (bsc#1257406)

• Release Date
  Feb 11 2026
• References
  Bugzilla: 1257406, 1257407, 1257405, 1257408, 1257403, 1257401
  CVEs: CVE-2025-14550, CVE-2026-1312, CVE-2026-1285, CVE-2026-1207, CVE-2026-1287, CVE-2025-13473
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.7 s390x

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  python-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock src

  python311-Django
  A high-level Python Web framework

  4.2.11-150600.3.47.1 lock rpm