Update Info

openSUSE-2025-380


Security update for python-Django


Type: security
Severity: important
Issued: 2025-10-03
Description:
This update for python-Django fixes the following issues:

- CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485)
- CVE-2025-59682: Fixed a potential partial directory-traversal via archive.extract() (boo#1250487)


              

Packages


  • python-Django-2.2.28-bp156.21.1