openSUSE 16.0 Python-Django Important Data Exposure Bugs Vul 2026-20937

- CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend (bsc#1267579)

- CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives (bsc#1267580)

- CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization (bsc#1267576)

- CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header (bsc#1267577)

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-Leap-16.0-packagehub-305=1

- openSUSE Leap 16.0:

python313-Django-5.2.4-bp160.9.1

*

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.