Alerts This Week
Warning Icon 1 500
Alerts This Week
Warning Icon 1 500

CentOS Flask-RESTful Enhanced Data Security Update CentOS-SU-2026-0085-3

opensuse
Calendar Grey February 7, 2026
Dist Opensuse Esm H88
Update for openSUSE addresses moderate security issue in python-djangorestframework. Patch and details provided.
An update that fixes one vulnerability, contains one feature is now available.

Description

This update for python-djangorestframework fixes the following issues:

- CVE-2024-21520: Fixed improper input sanitization before splitting and

joining with 'br' tags (boo#1227077)

- Tests can be run only on (newer) python311 stack

- Make it at least installable on python3 stack (no guarantees for it to

run)

- Use sle15allpythons to get the Python 3.6 packages (jsc#PED-8919)

Topics%20covered

Topics Covered

security advisory moderate input sanitization OpenSUSE python-djangorestframework cve-2024-21520

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2026-38=1

Package List

- openSUSE Backports SLE-15-SP7 (noarch):

python3-djangorestframework-3.14.0-bp157.2.3.1

python311-djangorestframework-3.14.0-bp157.2.3.1

References

https://www.suse.com/security/cve/CVE-2024-21520.html

https://bugzilla.suse.com/1227077

Announcement ID: openSUSE-SU-2026:0038-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP7 le.

Topics%20covered

Topics Covered

security advisory moderate input sanitization OpenSUSE python-djangorestframework cve-2024-21520

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here