Advisories » MGASA-2026-0510

Updated python-django package fixes security vulnerabilities

Publication date: 17 Oct 2026
Modification date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-77050 , CVE-2026-84429 , CVE-2026-87890 , CVE-2026-87975

Description

Potential denial-of-service vulnerability in
`get_supported_language_variant()`. (CVE-2026-77050)
Potential denial-of-service vulnerability in HTTP header parsing.
(CVE-2026-84429)
Potential request forgery via spatial lookup byte values.
(CVE-2026-87890)
Privilege abuse in model formsets with editable primary keys.
(CVE-2026-87975)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36465
• https://www.openwall.com/lists/oss-security/2026/10/06/3
• https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
• https://www.cve.org/CVERecord?id=CVE-2026-77050
• https://www.cve.org/CVERecord?id=CVE-2026-84429
• https://www.cve.org/CVERecord?id=CVE-2026-87890
• https://www.cve.org/CVERecord?id=CVE-2026-87975

SRPMS

10/core

• python-django-5.2.18-1.mga10