SUSE-SU-2025:4384-1

UNKNOWN

Security update for python-Django

Published Dec 12, 2025

Modified 1 months ago

Fix available

This update for python-Django fixes the following issues:

CVE-2025-13372: Fixed SQL Injection in FilteredRelation (bsc#1254437)
CVE-2025-64460: Fixed denial of service via specially crafted XML input in django.core.serializers.xml_serializer.getInnerText() (bsc#1254437)

SUSE:Linux Enterprise Module for Package Hub 15 SP6python-Django

Fixed in:

4.2.11-150600.3.44.1

SUSE:Linux Enterprise Module for Package Hub 15 SP6python311-Django

Fixed in:

4.2.11-150600.3.44.1

SUSE:Linux Enterprise Module for Package Hub 15 SP7python-Django

Fixed in:

4.2.11-150600.3.44.1

SUSE:Linux Enterprise Module for Package Hub 15 SP7python311-Django

Fixed in:

4.2.11-150600.3.44.1

openSUSE:Leap 15.6python-Django

Fixed in:

4.2.11-150600.3.44.1

openSUSE:Leap 15.6python311-Django

Fixed in:

4.2.11-150600.3.44.1

PublishedDec 12, 2025

ModifiedDec 12, 2025

SUSE-SU-2025:4384-1 | Mondoo Vulnerability Intelligence