< back to search

gpp_maybe Security update for python-django

openSUSE-2025-380

This update for python-Django fixes the following issues: - CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485) - CVE-2025-59682: Fixed a potential partial directory-traversal via archive.extract() (boo#1250487)

Release Date

Oct 3 2025
References

Bugzilla: 1250485, 1250487
CVEs: CVE-2025-59682, CVE-2025-59681
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.6 ppc64le

Packages

python3-Django
A high-level Python Web framework

2.2.28-bp156.21.1 lock rpm

SUSE Package Hub 15.6 x86_64

Packages

python3-Django
A high-level Python Web framework

2.2.28-bp156.21.1 lock rpm

SUSE Package Hub 15.6 aarch64

Packages

python3-Django
A high-level Python Web framework

2.2.28-bp156.21.1 lock rpm

SUSE Package Hub 15.6 s390x

Packages

python3-Django
A high-level Python Web framework

2.2.28-bp156.21.1 lock rpm