[SECURITY] [DSA 6150-1] python-django security update To : debian-security-announce@lists.debian.org Subject : [SECURITY] [DSA 6150-1] python-django security update From : Moritz Muehlenhoff < jmm@debian.org > Date : Thu, 26 Feb 2026 21:47:05 +0000 Message-id : < [🔎] aaC_WS65D5d2V6H1@seger.debian.org > Reply-to : debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6150-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 26, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : python-django CVE ID : CVE-2025-13473 CVE-2025-14550 CVE-2026-1207 CVE-2026-1285 CVE-2026-1287 CVE-2026-1312 Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, information disclosure or SQL injection. For the oldstable distribution (bookworm), these problems have been fixed in version 3:3.2.25-0+deb12u2. For the stable distribution (trixie), these problems have been fixed in version 3:4.2.28-0+deb13u1. We recommend that you upgrade your python-django packages. For the detailed security status of python-django please refer to its security tracker page at: https://security-tracker.debian.org/tracker/python-django Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmmgvnAACgkQEMKTtsN8 TjZTaw//ZjUpZaInmH5GWdGx/1d1E0fGOwg9KzdQgm7MLQFNhnvqXg5SQ1m18U4b fojOTvt871R0nlDu1nvtBh+G1H6XIfvEbqQJ5DpUjkgqopJuhxGYhHkcXUmkst8W dA23l3M4XD2B//jmzdCY2rwXPyXD42Md85Vus58negq3+sU0S+b6vybe2xtJco9K 8YU0Ej/cHKcSYibqszTeMJovxeuSS/BLlz5fEo9s2Un/EnNbLlTpfTOb4Cw/UEpI SLzCz99GHxKg/A0/0d6J8n5wLXcUTOUHztQkaGReyZgtrPFxU9KBe1m/YX89lgVo bx80rto7Xz6JiNgUXkCicWTZw5Um9eD1Kd+0a1umZLCdQbFyp9ZiWMG4Fy9L0LpF B4SUcWtLIQG07DE+PlMoiTU5mZptWYFS86zrxhoN2YbDSWQKuEZqQlHrO4P3x/5O B1q2vu2zleQDfR8RS0LFsxCysET54k2F4H+p4VjC5swkPnniBEe/xxS7+mAu8ax5 ja7B+85VxGnzagTRt0iunxpQk306ycD8yzbzSD5wKWie4ZxdUV87S9+DCa9gTaDN GOdQIsUlh7d1XlmlSHFQ7yLbvYC7jjYJc+RJVSWW9Ppj1GCGsJBfIbaBNOPmbClS OBR05wkMtGDWSDkt1otTV0bUxUUe52xGBesXDbAuFvwYoxebOjE= =A3oL -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6149-1] nss security update Previous by thread: [SECURITY] [DSA 6149-1] nss security update Index(es): Date Thread