SB2026071909 - openEuler 20.03 LTS SP4 update for python-django
Published: July 19, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 10 vulnerabilities.
1) Session Fixation (CVE-ID: CVE-2026-35192)
CWE-ID: CWE-384 - Session Fixation
CVSSv4: 7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to steal a user's session.
The vulnerability exists due to improper session handling in cached public pages when a session is not modified and SESSION_SAVE_EVERY_REQUEST is True. A remote attacker can leverage a cached public page visit by the victim to steal a user's session.
User interaction is required because the victim must visit a cached public page.
2) Use of cache containing sensitive information (CVE-ID: CVE-2026-35193)
CWE-ID: CWE-524 - Use of Cache Containing Sensitive Information
CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to compromise the target device.
The vulnerability exists due to use of cache containing sensitive information in "UpdateCacheMiddleware". A remote attacker can gain access to sensitive information on the target system.
3) Incomplete Comparison with Missing Factors (CVE-ID: CVE-2026-48587)
CWE-ID: CWE-1023 - Incomplete Comparison with Missing Factors
CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to "django.utils.cache.has_vary_header()" does not strip leading or trailing whitespace from "Vary" response header values before comparison. A remote attacker can read cached responses on the system.
4) Use of Web Browser Cache Containing Sensitive Information (CVE-ID: CVE-2026-48588)
CWE-ID: CWE-525 - Use of Web Browser Cache Containing Sensitive Information
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to expose private data via cached responses.
The vulnerability exists due to improper cache handling in django.middleware.cache.UpdateCacheMiddleware and django.views.decorators.cache.cache_page when processing requests that already contain unrelated cookies. A remote attacker can send a request with an unrelated cookie to expose private data via cached responses.
The issue occurs when a response sets a cookie while varying on Cookie.
5) Out-of-bounds read (CVE-ID: CVE-2026-53877)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to a heap-based buffer overflow in django.contrib.gis.gdal.GDALRaster vsi_buffer handling when parsing a bytes object representing a raster file. A local user can supply a crafted raster bytes object to disclose sensitive information.
Only rasters stored in GDAL's virtual filesystem are affected, and the issue may also cause a segmentation fault in rare cases.
6) Input validation error (CVE-ID: CVE-2026-5766)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to improper input validation in ASGI request handling when processing file uploads with a missing or understated Content-Length header. A remote attacker can send a specially crafted request to cause a denial of service.
Large uploaded files may be loaded into memory, causing service degradation.
7) Improper Verification of Cryptographic Signature (CVE-ID: CVE-2026-6873)
CWE-ID: CWE-347 - Improper Verification of Cryptographic Signature
CVSSv4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to the "django.http.HttpRequest.get_signed_cookie" uses a non-injective salt derivation. A remote user can use a cookie in a context different from the one where it was signed.
8) Use of Web Browser Cache Containing Sensitive Information (CVE-ID: CVE-2026-6907)
CWE-ID: CWE-525 - Use of Web Browser Cache Containing Sensitive Information
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to improper cache handling in django.middleware.cache.UpdateCacheMiddleware when processing responses whose Vary header contains an asterisk ('*'). A remote attacker can trigger caching of private data to disclose sensitive information.
Private data may be stored in the cache and later served to other users.
9) Cleartext transmission of sensitive information (CVE-ID: CVE-2026-7666)
CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information
CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to the "django.core.mail.backends.smtp.EmailBackend" fails to prevent reuse of a partially-initialized connection after a failed "STARTTLS" handshake. A remote attacker can gain access to sensitive data.
10) Improper Handling of Case Sensitivity (CVE-ID: CVE-2026-8404)
CWE-ID: CWE-178 - Improper Handling of Case Sensitivity
CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to "django.middleware.cache.UpdateCacheMiddleware" does not match "Cache-Control" response directives case-insensitively. A remote attacker can gain access to sensitive information on the system.
Remediation
Install update from vendor's website.