Mageia 9: Critical SQL Injection and DoS Vulnerabilities in python

Back Linuxsecurity

Mageia 9: Critical SQL Injection and DoS Vulnerabilities in python

Linuxsecurity •LinuxSecurity Advisories • December 5, 2025

Share: View original

Description: Potential SQL injection in FilteredRelation column aliases on PostgreSQL. (CVE-2025-13372) Potential denial-of-service vulnerability in XML serializer text extraction. (CVE-2025-64460)

Description: Potential SQL injection in FilteredRelation column aliases on PostgreSQL. (CVE-2025-13372) Potential denial-of-service vulnerability in XML serializer text extraction. (CVE-2025-64460)

- - - -

-

-

-

-

MGASA-2025-0320 - Updated python-django packages fix security vulnerabilities

MGASA-2025-0320 - Updated python-django packages fix security vulnerabilities

- 9/core/python-django-4.1.13-1.9.mga9

- 9/core/python-django-4.1.13-1.9.mga9

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SQL Injection and DoS Vulnerabilities in Python Frameworks Recent updates for Python frameworks Django and Mageia address critical vulnerabilities, including SQL injection and denial-of-service (DoS) issues. The vulnerabilities, identified as CVE-2025-13372 and CVE-2025-64460, affect PostgreSQL and XML deserialization processes. Users are urged to update their systems to mitigate these risks. 3 sources 39

Extracted Entities

Attack Types (2)

Denial-of-Service Sql Injection

CVEs (2)

CVE-2025-13372 CVE-2025-64460