Files
rpi-buildroot/package/python-django
Thomas Perale 0955700ceb package/python-django: security bump to 5.1.15
For more details on the version bump, see the release note:
 - https://docs.djangoproject.com/en/dev/releases/5.1.15/

Fixes the following security issue:

- CVE-2025-13372:

Potential SQL injection in FilteredRelation column aliases on
PostgreSQL.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-13372

- CVE-2025-64460:

Potential denial-of-service vulnerability in XML Deserializer.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-64460

(cherry picked from commit 2622f9ca25cdc179ed1be3d733fb9b963a7fc5b8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:17:06 +01:00
..