products/PackageHub
SHA256
31
1
Fork 13
Code Issues Pull Requests 21 Actions Activity

Pull request for security update for python-django #177

Manually merged
products merged 1 commits from rfrohl/PackageHub:maintenance-update-1760613179 into leap-16.0 2025-10-31 09:47:23 +01:00
Conversation 26 Commits 1 Files Changed 2 +18 -1
2 changed files with 18 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
patchinfo.20251016111300220521.93181000773252/_patchinfo Normal file
View File

@@ -0,0 +1,17 @@
<patchinfo>
<issue tracker="bnc" id="1250487">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
<issue tracker="cve" id="2025-59682">VUL-0: CVE-2025-59682: python-Django,python-Django4: Potential partial directory-traversal via archive.extract()</issue>
<issue tracker="cve" id="2025-59681"/>
<issue tracker="bnc" id="1250485">VUL-0: CVE-2025-59681: python-Django,python-Django4: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB</issue>
<packager>mcalabkova</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for python-Django</summary>
<description>This update for python-Django fixes the following issues:
- CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485)
- CVE-2025-59682: Fixed a potential partial directory-traversal via archive.extract() (boo#1250487)
</description>
<package>python-Django</package>
<seperate_build_arch/>
</patchinfo>

2
python-Django

Submodule python-Django updated: 59a6beb077...a2220d5d79