Ana Guerrero
ae72887214
- Update to 6.0.5
* CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
requests via file upload limit bypass (bsc#1264153)
* CVE-2026-35192: Session fixation via public cached pages and
SESSION_SAVE_EVERY_REQUEST (bsc#1264154)
* CVE-2026-6907: Potential exposure of private data due to incorrect
handling of Vary: * in UpdateCacheMiddleware (bsc#1264152)
* Fixed a misplaced </div> in the django/contrib/admin/templates/admin/change_list.html
template added in Django 6.0 that could be problematic when
overriding the pagination block
* Fixed a bug in Django 6.0 where deprecation warnings incorrectly
skipped lines from third-party packages prefixed with “django”
OBS-URL: https://build.opensuse.org/request/show/1351139
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Django6?expand=0&rev=6