SUSE Package Hub - openSUSE-2025-465

Update Info

openSUSE-2025-465

Security update for python-Django

Type: security

Severity: important

Issued: 2025-12-10

Description:

This update for python-Django fixes the following issues:

- CVE-2025-13372,CVE-2025-64460: Fixed Denial of Service in 'django.core.serializers.xml_serializer.getInnerText()' (bsc#1254437)

References

CVE: CVE-2025-64460
CVE: CVE-2025-13372
Bugzilla: 1254437 VUL-0: CVE-2025-64460,CVE-2025-13372: python-Django: Algorithmic complexity in `django.core.serializers.xml_serializer.getInnerText()` allows a remote attacker to cause a potential denial-of-service attack triggering CPU and memory exhaustion

Packages

python-Django-2.2.28-bp156.27.1