FEDORA-2026-e4146022ce — security update for python-django5

stable

python-django5-5.2.15-1.fc44

FEDORA-2026-e4146022ce created by salimma 3 months ago for Fedora 44

Fixes five low-severity CVEs

CVE-2026-6873: Signed cookie salt namespace collision
CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend
CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives
CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization
CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-e4146022ce

This update has been submitted for testing by salimma.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has been pushed to testing.

3 months ago

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

3 months ago

approved

3 months ago

Builds

python-django5-5.2.15-1.fc44

BZ#2484354 python-django5-5.2.15 is available

python-django5-5.2.15-1.fc44

Automated Test Results

ignored