Package python3-module-django: Information

A high-level Python 3 Web framework that encourages rapid development and clean, pragmatic design.
- New version 6.0.6.
- Fixes for the following security vulnerabilities:
  + CVE-2026-6873: Signed cookie salt namespace collision
  + CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend
  + CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives
  + CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization
  + CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header
- Some bugfixes.
- New version 6.0.5.
- Fixes for the following security vulnerabilities:
  + CVE-2026-5766: Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass
  + CVE-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST
  + CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware
- Some bugfixes.
- New version 5.2.13.
- Fixes for the following security vulnerabilities:
  + CVE-2026-3902: ASGI header spoofing via underscore/hyphen conflation
  + CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
  + CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
  + CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload
  + CVE-2026-33034: Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass

Package python3-module-django: Information

Last changed