Back Linuxsecurity openSUSE: python-Django Important Denial of Service Fix 2025-20153
This update for python-Django fixes the following issues: - CVE-2025-64459: Fixed a potential SQL injection via `_connector` keyword argument in `QuerySet` and `Q` objects (bsc#1252926) - CVE-2025-13372,CVE-2025-64460: Fixed Denial of Service in 'django.core.serializers.xml_serializer.getInnerText()' (bsc#1254437) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-50=1
- openSUSE Leap 16.0: python313-Django-5.2.4-bp160.4.1
- openSUSE Leap 16.0:
python313-Django-5.2.4-bp160.4.1
* bsc#1252926 * bsc#1254437 References: * * *
*
*
*
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
