Aggregator

python-django6-6.1.2-1.fc45

Fedora Security Advisories
4 days 1 hour ago
FEDORA-2026-c221dbc190 Packages in this update:
  • python-django6-6.1.2-1.fc45
Update description:

Update Django 6 to version 6.1.2

  • Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant()
  • Fixes CVE-2026-84429 [moderate]: Potential denial-of-service vulnerability in HTTP header parsing
  • Fixes CVE-2026-87890 [moderate]: Potential request forgery via spatial lookup byte values
  • Fixes CVE-2026-87975 [moderate]: Privilege abuse in model formsets with editable primary keys

See https://docs.djangoproject.com/en/6.1/releases/6.1.2/ for more details

python-django6-6.1.2-1.fc44

Fedora Security Advisories
4 days 1 hour ago
FEDORA-2026-dbd9eb6961 Packages in this update:
  • python-django6-6.1.2-1.fc44
Update description:

Update Django 6 to version 6.1.2

  • Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant()
  • Fixes CVE-2026-84429 [moderate]: Potential denial-of-service vulnerability in HTTP header parsing
  • Fixes CVE-2026-87890 [moderate]: Potential request forgery via spatial lookup byte values
  • Fixes CVE-2026-87975 [moderate]: Privilege abuse in model formsets with editable primary keys

See https://docs.djangoproject.com/en/6.1/releases/6.1.2/ for more details

USN-8896-1: GStreamer Ugly Plugins vulnerabilities

Ubuntu Security Advisories
4 days 16 hours ago
Michael Randrianantenaina discovered that GStreamer's Ugly Plugins incorrectly handled certain malformed RealMedia files. If a user were tricked into opening a crafted media file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-38103, CVE-2023-38104) It was discovered that GStreamer's Ugly Plugins incorrectly handled certain malformed ASF and RealMedia files. If a user were tricked into opening a crafted media file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-2920, CVE-2026-2922) Tianshuo Han discovered that GStreamer's Ugly Plugins incorrectly handled certain malformed RealMedia files. If a user were tricked into opening a crafted media file, an attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2026-53703, CVE-2026-53704) Seonwook Kim discovered that GStreamer's Ugly Plugins incorrectly handled certain malformed ASF files. If a user were tricked into opening a crafted media file, an attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2026-19389)